CISA directs federal agencies to replace end-of-life devices due to active exploitation

CISA ordered federal agencies to remove and replace unsupported internet-facing devices due to widespread exploitation by advanced hackers. The directive mandates agencies identify end-of-life edge devices within three months, begin removal in a year, and eliminate them entirely within 18 months. This action addresses a significant threat from nation-state adversaries targeting legacy systems, a common vulnerability in government networks.