US EditionPublished • loading... • Updated
CISA: Remove EOL Edge Kit Before Cybercriminals Strike
Federal agencies must inventory unsupported edge devices within three months and replace them within one year to reduce risks from cyberattacks, CISA said.
- On Thursday, the Cybersecurity and Infrastructure Security Agency issued a binding operational directive requiring federal civilian executive branch agencies to inventory and replace unsupported edge devices within specified deadlines.
- CISA warned that unsupported edge devices create a `substantial and constant` risk, and persistent cyber threat actors increasingly exploit them to gain network access and exfiltrate data.
- Within three months, agencies must report devices from CISA's EOS Edge Device List, inventory all edge devices losing support within 12 months, and decommission listed EOS devices within the same 12 months.
- The directive forces federal agencies to absorb procurement and operational burdens as CISA will monitor compliance and provide support with the Office of Management and Budget but has limited enforcement authority.
- Working with the FBI and the U.K. NCSC, CISA is producing a private EOS Edge Device List and fact sheet to help agencies comply, urging nonfederal organizations and allies to adopt similar measures.
Insights by Ground AI
14 Articles
14 Articles
CISA orders federal agencies to replace end-of-life edge devices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a new binding operational directive requiring federal agencies to identify and remove network edge devices that no longer receive security updates from manufacturers.
Coverage Details
Total News Sources14
Leaning Left0Leaning Right0Center7Last UpdatedBias Distribution100% Center
Bias Distribution
- 100% of the sources are Center
100% Center
C 100%
Factuality
To view factuality data please Upgrade to Premium
