News Summary

• On February 5, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) issued Binding Operational Directive (BOD) 26-02.
• The directive is aimed at Federal Civilian Executive Branch (FCEB) agencies, with strong recommendations for all organizations to address the risks posed by End-of-Support (EOS) edge devices.
• Edge devices are internet-facing and often integrated with identity management systems, making them high-value targets.
• CISA’s directive sets multiple deadlines on a two-year timeline for federal agencies.