CISA BOD 26-04 tells agencies to prioritize patches by risk
Timelines depend on internet access, known exploitation, whether exploitation can be automated, and attacker control.
Stories per day · 30 days
2 RSS
Relateddeepseek6dhs5china3cisa3supply-chain2ai-regulation1bod-26-041cdn1cryptography1encrypted-client-hello1export-controls1fips-2031government-ban1harvest-now-decrypt-later1ios-app1kev1nist1omb1
12 stories, newest first · one card per story
Stories tagged #federal-agencies
NIST publishes guidance for federal post-quantum cryptography deadlines
High-value assets must use PQC for key establishment by December 31, 2030, and for signatures by December 31, 2031.
1
China demands the US lift its federal DeepSeek removal order
The order also covers other vendors' software built on DeepSeek models and bars future federal purchases.
3
DHS orders federal civilian agencies to remove DeepSeek products
The order also covers affiliates and third-party products built on DeepSeek, with CISA reviewing exceptions.
DHS bars DeepSeek from U.S. civilian agency systems
The order also blocks procurement of third-party products and services built with DeepSeek technology.
DHS orders civilian agencies to stop buying and remove DeepSeek
The October 2026 supply-chain order covers affiliates and third-party products, not private DeepSeek use.
DHS orders US civilian agencies to stop using DeepSeek
The order also covers affiliate products and third-party services developed using DeepSeek, a phrase critics call undefined.
DHS orders civilian agencies to remove DeepSeek and tools built on it
Order 2026-01, signed July 24 and published in October, bars purchases immediately and excludes military systems.
Wyden urges federal agencies to enable Encrypted Client Hello
His office found at least 350 federal sites without ECH, including an FBI tipline and a VA crisis hotline.
3
Here’s how experts think CISA should tell agencies to protect OT
Experts urge CISA to issue a binding directive requiring federal agencies to secure operational technology.
2
Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack
DHS watchdog finds 86 percent of civilian agencies missed CISA’s cloud security directive deadline.
CISA decides weekly vulnerability bulletin isn't necessary anymore
CISA will discontinue its weekly vulnerability bulletin on September 28, pushing users toward KEV, alerts, and CVE data under risk-based prioritization.
1