CISA orders federal agencies to “patch smarter”

CISA issued a Binding Operational Directive to shift US federal agencies toward risk-based vulnerability management as patching becomes increasingly unmanageable due to surging vulnerabilities and AI-accelerated exploit development. The directive introduces a framework to help agencies patch smarter.