CISA cracks down on aging edge devices.

Top cybersecurity headlines: CISA issued a Binding Operational Directive requiring removal of end-of-support edge devices and warned of active exploitation of a critical SolarWinds Web Help Desk vulnerability (CVE-2025-40551, CVSS 9.8); CERT Polska reported a Russian-attributed attack compromising Polish energy infrastructure due to poor security; Romania’s Conpet disclosed a disruptive cyberattack and alleged data theft by the Qilin ransomware group; Notepad++ update traffic was hijacked in a suspected Chinese state-backed supply-chain compromise; and French authorities raided X over investigations into its Grok AI tool.