Government Agencies Warn of Risks from Discontinued Edge Devices, Urge Immediate Replacement
U.S. and UK government agencies have issued a warning regarding the security risks associated with discontinued edge devices, urging organizations to replace them promptly. Edge devices, which include firewalls, IoT devices, load balancers, and network security appliances, are critical for routing network traffic. However, once these devices reach end-of-support (EOS) status, they no longer receive security updates, making them vulnerable to exploitation by state-sponsored threat actors. The Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and the UK's National Cyber Security Centre (NCSC) have highlighted the potential for these devices to be used as entry points for unauthorized access, data theft, and network persistence. CISA has issued Binding Operational Directive 26-02, which mandates federal agencies to update or replace unsupported edge devices to mitigate these risks.