(Getty Images) CISA directive orders agencies to prioritize vulnerability patching in a new way A vulnerability that meets all four criteria would need to be fixed within three days, for instance. 4 hours ago By Tim Starks