Adobe's response to this latest patch seems a bit 'muted'. It reads very much like every other recent CF update. Yet reading Charlie's post (thanks Charlie!!) it seems like a very serious situation.

They likely operate through a lawyers perspective first; not the customer.

I had very much the same impression. It wasn’t until I started skimming Charlie’s blog post this morning when it popped up my RSS reader that I had a sense of the severity.

I found out about it from the SANS newsletter, https://www.sans.org/, there's a form in the bottom right of the page to subscribe. Lots of stuff goes on that's not in the mainstream news, cf and not.