> CISA Orders Agencies to Patch by Risk, Not Severity
[DATE: 11/06/2026 15:00]
[LANGUAGE: EN]
New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores