CISA sunsets 10 emergency directives thanks to evolution of exploited vulnerabilities catalog

CISA has closed ten emergency directives issued from 2019–2024 after determining they were either successfully implemented or rendered redundant by adding the affected vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog; the report cites several high-profile Microsoft, VMware, Pulse Secure, and other CVEs and notes that closure reflects improved federal remediation and risk posture rather than ongoing active exploitation.