Organizations patch CISA KEV list bugs 3.5 times faster than others, researchers find