NSA Warns Companies China Is Exploiting 25 Unpatched Vulnerabilities

The NSA cannot mandate patching on its own, but the new Cybersecurity Maturity Model Certification (CMMC) allows the Pentagon to penalize companies in its supply chain that fail to adequately protect their networks.