US Agencies Told to Scrap End of Support Edge Devices

**CISA issued Binding Operational Directive 26-02** requiring federal civilian agencies to mitigate risks from end-of-support (EOS) edge devices—targets of ongoing exploitation—by identifying EOS devices within 3 months, decommissioning those already EOS within 12 months, inventorying devices that will become EOS in the following 12 months, removing identified EOS edge devices within 18 months, and establishing continuous discovery and inventory processes within two years.