Home / Jun 12, 2026 / Story
0
#2 BleepingComputer general June 11, 2026 at 12:46 UTC

CISA tells govt agencies to patch critical exploited flaws in 3 days

By Bill Toulas

AI Summary

CISA's new Binding Operational Directive 26-04 significantly tightens federal patching timelines, requiring Federal Civilian Executive Branch agencies to remediate the most critical exploited vulnerabilities within just 3 days — down from previous 14-day windows. The directive ties prioritization to the KEV catalog and gives agencies 180 days to update their vulnerability management policies. This sets a new benchmark that private-sector security programs will likely be pressured to emulate.

Relevance score: 90.0/100

# More from June 12