US shortens cyber fix window

The United States — Cybersecurity and Infrastructure Security Agency (United States — Cybersecurity and Infrastructure Security Agency) has issued a new directive, shortening the deadline for civilian federal agencies in the United States to address critical digital vulnerabilities to three calendar days. This compressed timeline is a direct response to the increasing capabilities of hackers, who are leveraging advanced Artificial intelligence models, such as Anthropic's Mythos, to exploit security flaws more rapidly and at scale. Chris Butera, Acting Executive Assistant Director for Cybersecurity at United States — Cybersecurity and Infrastructure Security Agency, stated that defenders cannot afford to take weeks to patch systems that can be autonomously exploited. The directive aims to harden American networks and ensure government policies are adequate for applying fixes, with less severe weaknesses still having longer remediation periods. Reuters had previously reported on the consideration of this three-day deadline.