CISA Official Discusses AI-Powered Cyber Risks and New Patching Processes
Speaking at the Cyber Leaders Exchange 2026 event, CISA official Chris Butera discussed how artificial intelligence increases cyber risks and outlined new patching rules.
Making statements at the Cyber Leaders Exchange 2026 event, Chris Butera from the Cybersecurity and Infrastructure Security Agency shared AI-driven cyber threats along with new patching timeframes and projects implemented against them.
Preparations Against Artificial Intelligence Threats
The Cybersecurity and Infrastructure Security Agency's cybersecurity division is preparing federal agencies and critical infrastructure for an era where artificial intelligence accelerates attackers' vulnerability discovery processes.
New Patching Timeframes and December Goals
Per the operational directive issued by CISA in June, agencies are prioritizing the highest-risk vulnerabilities. As of December, a maximum of three days will be allowed to patch these vulnerabilities.
The agency aims to reduce this timeframe to 24 hours for publicly known critical bugs.
Gold Eagle Program and the Future of CVE
CISA is supporting the Gold Eagle program, established under the leadership of the Treasury Department, which coordinates vulnerabilities discovered by artificial intelligence using machine-readable formats.
Additionally, the Common Vulnerabilities and Exposures program is transitioning from a period of growth to a period of quality, with projections to reach between 90,000 and 100,000 CVEs by the end of the year.