While the CFAA and all of its troubled language remains in place, the DOJ has announced that security researchers who do not have malicious intent do not have anything to fear anymore.
New vulnerability disclosure rules announced by the Chinese government have raised the prospect of "zero-day hoarding," as anything discovered in the country must now be reported to the CCP and to no one else (in most cases).
