CERT‑In mandates remediation of internet‑facing vulnerabilities within 12 hours — implications for security

Colleagues, for your attention: CERT‑In now requires that critical vulnerabilities in internet‑accessible systems be remediated within 12 hours where feasible.

Briefly:
- What: 12 hours for known, exploitable external vulnerabilities; thereafter 1, 3 and 5 days by priority.
- Recommendations: Zero Trust, layered defense, SBOM, continuous monitoring and red‑teaming.
- Practices: interim mitigations — isolation, WAF, access restrictions and automation.

Why it matters: AI compresses the response window, increasing the risk of rapid compromise.

How are you evolving your vulnerability management?

#cybersecurity #vulnerabilities #ZeroTrust #AI