I think there is definitely a trend here: security researchers are increasingly using AI tools to discover vulnerabilities, so it’s reasonable to expect a higher number of reported CVEs in the future.
At the same time, I’m not sure this automatically creates the need to discuss every security bulletin here. Raising awareness is important, especially for issues affecting the underlying OS and shared components, but every distribution already has its own security advisories and dedicated discussion channels. We should probably avoid duplicating those efforts in the forum.
Regarding categories, I don’t think fragmentation is always beneficial. Our categories are not meant to be generic topic rooms, but rather to reflect how the community collaborates around the project and its ecosystem. For example, the WebTop category exists because WebTop is a NS8 application but also a project on its own, we host its developers here, and users discuss issues directly with them. I think the same reasoning also applies to the NethSecurity category.