The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is considering reducing the deadline for government agencies to patch exploited software vulnerabilities.

The current average response time for these patches is 14 days.

CISA and the Office of the National Cyber Director are reportedly discussing a new three-day deadline.

The proposal aims to counter hackers using AI models from OpenAI and Anthropic to discover flaws.

Industry experts warn that a three-day timeline may be impossible to implement within complex IT environments.