CISA tells agencies to stop using unsupported edge devices

CISA issued a binding operational directive requiring federal civilian agencies to inventory unsupported edge devices (e.g., firewalls and routers) within 3 months, replace listed unsupported devices within 1 year, and implement a recurring process within 2 years to identify end-of-support equipment, citing persistent exploitation of such devices; coordinated with OMB, the directive’s device list will not be public, and CISA urges non-federal organizations to take similar actions.