“The standard timeframe set by the Cybersecurity and Infrastructure Security Agency (CISA) for patching vulnerabilities is two weeks.”