CISA ransomware warning program set to fully launch by end of 2024

CISA’s vulnerability warning pilot aims to curb ransomware by proactively identifying internet-facing vulnerable systems and notifying owners; since launch it has issued 2,000+ alerts and reports that 49% of more than 1,700 2023 notifications were mitigated through patching or other actions. The program now incorporates the Known Exploited Vulnerabilities catalog and common misconfigurations, can use administrative subpoenas to reach affected entities, and complements CISA’s free cyber hygiene scanning service (used by 7,600+ organizations) that typically reduces risk by 40% within 12 months.