SSVC

CISA BOD 26-04 ends CVSS-ordered patching: the four questions that replace it

CISA's Binding Operational Directive 26-04 drops CVSS from federal patch prioritisation, replacing it with four yes/no questions and a sixteen-row deadline table.