The agencies are making the familiar controls feel timed instead of optional, with AI framed as shrinking the gap from vulnerability discovery to exploitation. Good click for anyone who wants the board-level version of patch latency, exposed systems, legacy debt, identity review, and incident drills, but the retained source is a warning statement rather than proof of a new exploit primitive.