The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a mandatory directive requiring federal civilian agencies to comprehensively identify and remove edge network devices and software that are no longer supported by vendors within a specified timeframe, such as outdated routers, firewalls, VPN gateways, and switches. CISA points out that these 'end-of-life' devices, lacking security updates, have become a primary avenue for state-sponsored hackers to infiltrate government networks, necessitating prompt remediation to eliminate significant security risks.
