cybercrime.clubhttps://cybercrime.club/tags/patch-management/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usFri, 12 Jun 2026 11:09:54 -0400CISA Kills the Flat KEV Deadline: BOD 26-04 Starts a Three-Day Patch Clockhttps://cybercrime.club/posts/cisa-bod-26-04-three-day-patch-clock-risk-based-remediation/Fri, 12 Jun 2026 11:09:54 -0400https://cybercrime.club/posts/cisa-bod-26-04-three-day-patch-clock-risk-based-remediation/BOD 26-04 revokes BOD 22-01 and 19-02, replacing flat KEV due dates with risk-tiered deadlines: three days plus mandatory forensic triage for internet-facing, automatable, total-control flaws.policy