Timeline
BOD 26-04
CISA's 2026 risk-tiered patch directive replacing fixed KEV deadlines with four remediation windows.
10 of 10 entries (10 events, 0 interactions)
Filters
#14 30 Sept
Mentioned in: CISA set three-day deadlines on 34 flaws
Cybersecurity: Threats and Defences#13 2 Sept
KEV three-day deadline share fell to 71%
Cybersecurity: Threats and Defences#12 28 Jul
Replaced fixed-deadline BOD 22-01 with risk-tiered triage on 10 June
Cybersecurity: Threats and Defences: KEV patch clocks fell to three days#10 14 Jul
Risk-tiered directive that may be reshaping KEV additions
Cybersecurity: Threats and Defences: A quiet KEV fortnight, then a 2008 bug#9 4 Jul
Risk-tiered directive one fortnight in
Cybersecurity: Threats and Defences: BOD 26-04, a fortnight of triage#9 1 Jul
SharePoint patch clock runs out today
Cybersecurity: Threats and Defences#8 23 Jun
Provided the 3-day top-tier risk classification for the first time in the wild
Cybersecurity: Threats and Defences: Triple CVSS-10 Ubiquiti chain hits root#8 22 Jun
Mentioned in: Five Eyes warn AI threat is months away
Cybersecurity: Threats and Defences#8 10 Jun
Introduced four-dimension risk scoring replacing single deadline model
Cybersecurity: Threats and Defences: CISA tears up its KEV deadline rules#12 9 Jun