--- title: CISA mulls new three-day remediation deadline for... description: CISA is reportedly considering reducing the remediation deadline for critical known-exploited vulnerabilities from 14 days to just 72 hours, driven by concerns... canonical: https://daily.dev/posts/cisa-mulls-new-three-day-remediation-deadline-for-critical-flaws-s4wlgrrhr twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CISA mulls new three-day remediation deadline for critical flaws | daily.dev og:description: CISA is reportedly considering reducing the remediation deadline for critical known-exploited vulnerabilities from 14 days to just 72 hours, driven by concerns... og:url: https://daily.dev/posts/cisa-mulls-new-three-day-remediation-deadline-for-critical-flaws-s4wlgrrhr og:image: https://api.daily.dev/og/posts/s4WlGRRHR.png og:image:alt: CISA mulls new three-day remediation deadline for critical flaws og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CISA mulls new three-day remediation deadline for critical flaws **[CSO Online](https://daily.dev/sources/csoonline)** · 5 min read · 0 upvotes · 0 comments ## Summary CISA is reportedly considering reducing the remediation deadline for critical known-exploited vulnerabilities from 14 days to just 72 hours, driven by concerns that AI models like Anthropic's Claude Mythos could accelerate attacker exploitation of flaws. The current framework under BOD 22-01 requires patching KEV-listed vulnerabilities within 14 days. Security experts are divided: some argue three days is impractical without proper testing infrastructure, while others say agencies already capable of meeting 14-day deadlines could adapt. The change remains unconfirmed but involves senior officials including CISA's acting chief and the US national cyber director. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISA tells govt agencies to patch critical exploited flaws in 3 days](https://daily.dev/posts/cisa-tells-govt-agencies-to-patch-critical-exploited-flaws-in-3-days-y4ewbawft) · BleepingComputer · 0 upvotes · 0 comments - [CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw](https://daily.dev/posts/cisa-slaps-its-tightest-three-day-patching-deadline-on-perfect-10-oracle-flaw-hs4ay1lvj) · The Register · 1 upvotes · 0 comments - [The 72-Hour Rule: CISA Just Turned Patch Management Into a Ticking Clock](https://daily.dev/posts/the-72-hour-rule-cisa-just-turned-patch-management-into-a-ticking-clock-d9yn7xfqn) · Security Boulevard · 0 upvotes · 0 comments - [Indian CERT urges firms to contain exploited internet-facing flaws within 12 hours](https://daily.dev/posts/indian-cert-urges-firms-to-contain-exploited-internet-facing-flaws-within-12-hours-pcgqrhwle) · CSO Online · 0 upvotes · 0 comments - [CISA gives US federal agencies three days to fix a VPN bug under attack by a ransomware gang](https://daily.dev/posts/cisa-gives-us-federal-agencies-three-days-to-fix-a-vpn-bug-under-attack-by-a-ransomware-gang-qaktop01p) · TechCrunch · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#ai-security](https://daily.dev/tags/ai-security) [View this post on daily.dev](https://daily.dev/posts/cisa-mulls-new-three-day-remediation-deadline-for-critical-flaws-s4wlgrrhr) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CISA mulls new three-day remediation deadline for critical flaws","url":"https://daily.dev/posts/cisa-mulls-new-three-day-remediation-deadline-for-critical-flaws-s4wlgrrhr","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cisa-mulls-new-three-day-remediation-deadline-for-critical-flaws-s4wlgrrhr"},"datePublished":"2026-05-05T19:36:50.709Z","dateModified":"2026-05-05T19:37:20.717Z","description":"CISA is reportedly considering reducing the remediation deadline for critical known-exploited vulnerabilities from 14 days to just 72 hours, driven by concerns...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/060e89dea10ee4099607c4c856a8e83a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/060e89dea10ee4099607c4c856a8e83a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"CSO Online","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CSO Online","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/98667e4b5cac46cf9c470819c6cf71cd","url":"https://daily.dev/sources/csoonline"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cisa-mulls-new-three-day-remediation-deadline-for-critical-flaws-s4wlgrrhr","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,ai-security","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CSO Online","item":"https://daily.dev/sources/csoonline"},{"@type":"ListItem","position":3,"name":"CISA mulls new three-day remediation deadline for critical flaws"}]} ```