New Paper and Tool Help Security Teams Move Beyond Blind Reliance on CISA’s KEV Catalog