Cisco's two exploited flaws and CISA's patch clock

CISA gave federal agencies three days to patch two Cisco zero-days under active exploitation. The patch closes the door, but it does not remove the attacker already inside.