Federal vulnerability management is stuck. A patch wave is coming anyway.

Update federal patch timelines to reflect the reality that disclosure-to-exploitation windows are now measured in hours, not weeks.