CISA Tells US Agencies to Fix Security Bugs in as Little as 3 Days Thanks to AI Threats
CISA has issued a new directive requiring federal agencies to patch critical security vulnerabilities within three days. This move is a response to the increased speed at which AI tools allow hackers to discover and exploit software flaws.
Why it matters
It highlights the escalating cybersecurity arms race between government defenders and AI-enabled malicious actors.
CISA acting director Nicholas Andersen Photograph: Andrew Harnik/Getty Images Comment Loader Save Story Save this story Comment Loader Save Story Save this story With new generations of AI models fueling both rapid software vulnerability discovery and the potential for faster exploitation by malicious hackers, the United States Cybersecurity and Infrastructure Security Agency released a new directive on Wednesday that requires more rapid and efficient software patching by federal civilian agencies. The “binding operational directive” (BOD) lays out a rubric for how quickly bugs must be fixed based on four assessments of urgency, with a turnaround time in critical cases of just three days.
The article reports on government policy and cybersecurity threats in a factual, objective manner.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in