Rapid7
The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
There is no written leader briefing for this story yet. The summary below says what is known so far.
Next steps
Monitor- For awareness — no fixed action deadline for this reporting.
No technical write-up beyond the summary below yet.
Next steps
Monitor- Check whether the techniques or products described apply to your estate
Summary
- Introduction to BOD 26-04 On 10 June 2026, CISA issued Binding Operational Directive 26-04, "Prioritizing Security Updates Based on Risk." Strip away the regulatory language and it reads like a single operational fact: for a vulnerability that is actively exploited, publicly reachable, and grants an attacker full control, you now have three calendar days to remediate it — and you must run a forensic investigation in parallel to determine whether you've already been breached.
Products and services involved
- Rapid792% match confidence
Pulse
Last change 4d ago · Recheck overdue since 5 Nov 2026, 15:39 UK time
- Story4 Nov 2026, 15:39 UK time · 4d ago
Linked reporting from Rapid7 Blog (research).
Read source (Rapid7 Blog)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- Rapid7 BlogResearcher
The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance
- ProbableSummary fact75% confidence
Introduction to BOD 26-04 On 10 June 2026, CISA issued Binding Operational Directive 26-04, Prioritizing Security Updates Based on Risk. Strip away the regulatory language and it reads like a single operational fact: for a vulnerability that is actively exploited, publicly reachable, and grants an attacker full control, you now have three calendar days to remediate it — and you must run a forensic investigation in parallel to determine whether you've already been breached.