CISA issued BOD 26-04, directing federal agencies to update vulnerability management policies. The order requires agencies to prioritize security patches based on risk, with a specific focus on vulnerabilities listed in the Known Exploited Vulnerabilities (KEV) catalog.
Tap to vote and see what everyone thinks.