CISA BOD 26-02, EOS, and runZero

The post reviews CISA’s BOD 26-02 on end-of-support edge devices, noting that CISA will keep its EOL list private, and offers a practical approach for runZero users to approximate compliance by querying inventories for internet-exposed, non-endpoint devices in an “EOL Extended” state, with a promise of a forthcoming one-click workflow similar to their Section 889 checks.