| Mobile Web

U.S. government cuts deadline to 3 days for most critical cyber flaws amid AI attacks

The U.S. Cybersecurity and Infrastructure Security Agency has issued new guidance requiring federal agencies to address the most severe vulnerabilities within as little as three days. The policy shifts vulnerability management from a uniform approach to risk-based prioritisation, focusing first on flaws with high likelihood of exploitation and large potential impact. CISA said only 1 percent of vulnerabilities would fall under the three-day rule, while lower-risk issues could follow regular patch cycles.