How do I get alerted when a new CVE affects me?
Route alerts to the channel your team already watches — email for the daily record, and a chat channel such as Slack or Telegram for anything urgent. The rule that makes alerting survive is that only exploitation-relevant, inventory-matched CVEs page anyone; everything else belongs in a digest nobody has to read immediately.
Alert fatigue is the failure mode that kills these systems. A channel that fires on every Critical CVE gets muted within a fortnight, and then the one alert that mattered arrives into silence.
A workable split: immediate notification for confirmed-exploited vulnerabilities that match your declared stack, and a scheduled digest for everything else. The second category is the overwhelming majority.
Whatever you choose, make the alert carry the decision, not just the identifier. "CVE-XXXX-NNNN, exploited, affects your edge appliance, patch available" is actionable; a bare CVE number is a research task.