CISA Orders Federal Edge Device Replacements as Podcast Examines Offensive Cyber Operations

Summary

Security Now examines CISA’s directive on unsupported federal edge devices, reported US cyber operations against Iran and Venezuela, and delays in collecting Irish data protection fines.

Key points

• CISA’s BOD 26-02 directs federal civilian agencies to inventory unsupported edge devices and phase them out on specified timelines.
• Agencies must inventory devices on CISA’s preliminary list within three months and decommission listed devices that are out of support by the 12-month deadline.
• The Record reported that a US cyber operation disrupted Iranian air defenses during Operation Midnight Hammer; officials did not disclose the device attacked.
• Officials also said cyber operations disrupted power, air-defense radar and radios in Venezuela during the mission to capture Nicolás Maduro.
• Citing the Irish Times, the podcast reported that most Irish Data Protection Commission fines remained uncollected or subject to legal challenge.
• A listener noted that ISPs can associate carrier-grade NAT subscribers with connections through source-port and IP allocation logs; the hosts cautioned against assuming a private IP provides anonymity.