CISA Cuts Deadline For Patching Critical Weaknesses In Half

A new binding operational directive from Homeland Secrity's Cybersecurity and Infrastructure Security Agency requires civilian federal agencies to patch "critical" vulnerabilities in only 15 days (instead of 30 days, as before), and to ensure that diagnostic scans of their systems are allowed.