The U.S. Cybersecurity and Infrastructure Security Agency has published a catalog of vulnerabilities that are being actively exploited by malicious cyber actors. The agency requires federal agencies to prioritize applying patches for those flaws within “aggressive” timeframes. About 176 vulnerabilities identified between 2017 and 2020, and 100 flaws from 2021 have made their way to the initial list. The new strategy also sees the agency moving away from severity-based vulnerability remediation to those that pose significant risk and are being abused in real-world intrusions.”]
Source: https://thehackernews.com/2021/11/us-federal-agencies-ordered-to-patch.html