US gov shortens cyber fix window to three days

▤ Summary

The US cyber defense agency has shortened the remediation window for the most serious vulnerabilities in federal civilian networks to three days. The new directive requires agencies to fix, disable, or remove vulnerable software or equipment quickly when the threat is severe. The move responds to concerns that AI is making it easier for hackers to exploit flaws at scale and faster than defenders can respond. Less severe vulnerabilities still have longer deadlines, including two weeks or up to two months depending on risk.

▦ Linked Companies

Thomson Reuters

$1B+