CISA to require federal agencies to patch some cyber vulnerabilities within 3 days

The Record roundup: CISA issued a binding operational directive requiring federal agencies to patch certain vulnerabilities within 3 days (with agencies given 180 days to adopt the timeframe) and said it will change how it assesses and prioritizes vulnerabilities. Microsoft released its largest Patch Tuesday on record, including at least one bug under active exploitation. Separately, a major Australian sugar producer experienced a cyberattack that disrupted operations, and the UK scaled back proposed telecoms defenses tied to the Salt Typhoon espionage response after industry pushback.