Previously we announced a fix for changing Citadel vulnerability timers. After further testing, a few details of the handling of vulnerability timers during this fix’s deployment have changed.

Now, any and all pending vulnerability timers as of downtime (11:00UTC) on Tuesday, May 31 2016, will take effect during that downtime. This includes any changes made to vulnerability windows made after 00:00UTC on Monday, 30 May 2016, but before the deployment downtime. Any changes made after this downtime will take effect at 00:00UTC on Monday, 6 June 2016, as normal.

The previous news item has now been updated to include this change. For any further questions, please see this forum thread