42
30
55
30
42
30
30
42
30
42
30
55
42
30
55
30
55
30
60
30
30
42
30
30
55
55
30
42
30
55
55
30
30
Severity Is Not a Strategy: What CISA BOD 26-04 Means for the Future of Federal Software Security
CISA's BOD 26-04 replaces severity-based federal patching with risk-based remediation deadlines of 3, 14, or 60 days.
CISA's Binding Operational Directive 26-04, released June 10, 2026, replaces BOD 19-02 and BOD 22-01 for Federal Civilian Executive Branch agencies and shifts remediation prioritization from CVSS scores to risk context. Agencies assess four factors: public exposure, KEV listing, exploit automatability, and whether exploitation grants partial or total asset control, resulting in 3-, 14-, or 60-day remediation windows or next-upgrade fixes. In CISA's first review at a large civilian agency, only 1% of vulnerabilities required three-day remediation while over 60% could wait for future system upgrades. The directive also requires forensic analysis when exploitation is suspected, and Checkmarx argues the same risk-based logic must extend upstream into software development and SBOM-driven exposure management.
58
Pornhub's Parent Company to Pay $120 Million to Settle Child Sexual Abuse Lawsuits
Pornhub parent Aylo will pay $120 million settling child sexual abuse class actions, without admitting liability, and adopt stricter content moderation commitments.
Aylo, Pornhub's parent company (formerly Mindgeek, acquired by Ethical Capital Partners in 2023), will pay $120 million to settle two 2021 class actions in California and Alabama alleging its platforms hosted child sexual abuse material in violation of federal trafficking and child imagery laws. The settlement fund begins with $25 million in 2026 followed by six annual installments. The class covers anyone under 18 appearing in content on Mindgeek-operated sites between February 12, 2011 and December 6, 2024. The deal, subject to court approval, adds commitments to age-verify models, conduct human and automated content review, and report suspected abuse material to authorities.
20
30
30
30
60
30