Update SECURITY.md

Update CVE website Security Policy

Author: rroberge

SECURITY.md

@@ -1,22 +1,16 @@
 # Security Policy
 
 ## Reporting a Vulnerability
-Please use the <a href="https://cveform.mitre.org/" target="_blank">CVE Program web forms</a> to report security vulnerabilities for the 
-<a href="https://www.cve.org" target="_blank">CVE website</a>. Please include vulnerability details, steps to reproduce (e.g., proof-of-concept code, 
-screenshots) and an assessment of the impact in your report. We appreciate concise and high-quality reports.
-
-## Web Form Submissions
-
-* In the “Select a request type” drop down menu, please select “Other”
-* Enter your email address in the space provided
-* You may enter a PGP key if you prefer to encrypt your correspondence
-* In the “Type of comment” drop down menu, please select “Issue”
-* In the textbox labeled “Please provide your question, issue, comment, etc.” please start the message with the following information: 
-  - First Line: “CVE Website Security Anomaly Report”
-  - Second Line: “Distribution: CVE Website Development Team”
-  - Third Line: "Description: [Free Text description of the anomaly]”
-* Enter the Security code
-* Click “Submit Request”
+Please use the <a href="https://cveform.mitre.org/" target="_blank">CVE Program Web Forms</a> (choose “General Support”) to report security vulnerabilities for the 
+<a href="https://www.cve.org" target="_blank">CVE website</a>.
+
+Please include:
+
+* Vulnerability details
+* Steps to reproduce (e.g., proof-of-concept code, screenshots)
+* An assessment of the impact 
+
+We appreciate concise and high-quality reports.
 
 ## Scope
 
@@ -28,4 +22,4 @@ We will release fixes for verified security vulnerabilities. We expect to publis
 <a href="https://github.com/CVEProject/cve-website/security/advisories" target="_blank">security advisories</a>.
 
 ## Coordination
-We appreciate the opportunity to investigate and develop fixes before public disclosure, following coordinated vulnerability disclosure practices.
+We appreciate the opportunity to investigate and develop fixes before public disclosure, following coordinated vulnerability disclosure practices.