A new alert system from CISA seems to be effective — now we just need companies to sign up
Summary: Under a CISA pilot program running since January 2023, CISA has sent more than 2,000 alerts to registered organizations about unpatched vulnerabilities in its Known Exploited Vulnerabilities catalog, and director Jen Easterly said 49 percent of those vulnerabilities were mitigated through patching or other means. More than 7,000 organizations have registered for the pilot, which launches in earnest later this year and is currently limited to federal, state, local, tribal and territorial governments and public and private sector critical infrastructure organizations.
What's compelling: Nearly half of the alerted vulnerabilities got fixed, yet the program reaches only a defined slice of organizations, and the article notes that understaffed, underfunded state and local teams may not have heard of it at all.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026