US Cybersecurity Officials Propose 72-Hour Patch Cycle to Combat AI-Driven Threats
US cybersecurity officials are advocating for a significant reduction in the time federal agencies have to patch critical vulnerabilities, proposing a shift from a 14-day window to just three days. This change is driven by the increasing sophistication of AI models, such as Anthropic's Mythos and OpenAI's GPT-5.4-Cyber, which enable attackers to exploit software flaws at unprecedented speeds. The Cybersecurity and Infrastructure Security Agency (CISA) has already instructed federal agencies to patch some vulnerabilities within three days if the risk of exploitation is deemed significant. This proposal is part of a broader effort to enhance the nation's cybersecurity posture in response to evolving threats.