Organizations Patch CISA KEV List Bugs 3.5 Times Faster Than Others, Researchers Find

The median time to patch bugs listed in the CISA’s Known Exploited Vulnerabilities (KEV) catalog is 174 days, compared to 621 days for non-KEV vulnerabilities, according to an analysis by Bitsight.