Just like 'quiet quitting' is an incorrect term that misrepresents what it describes, this 'quiet promotion' also misrepresents; both seem to play down their effects. That's the problem with trying to come up with soundbites.

This is simply "being taken advantage of". Why does it need a catchy title like every new CVE?