Story perspectives

CISA Issues Urgent Directive on Cisco SD-WAN Vulnerabilities

2/26/2026

Summary

Story summary

The Cybersecurity and Infrastructure Security Agency issued an emergency directive to address Cisco Software-Defined Wide-Area Networking (SD-WAN) vulnerabilities after hackers targeted them.
They must identify potentially affected systems and ensure proper logging by February 26.
Agencies must inventory affected systems and apply updates by February 27.
They must report actions by March 5.
They must summarize network hardening by March 12, and funding lapses threaten CISA's workforce.

1 of 1

Story summary

The Cybersecurity and Infrastructure Security Agency issued an emergency directive to address Cisco Software-Defined Wide-Area Networking (SD-WAN) vulnerabilities after hackers targeted them.
They must identify potentially affected systems and ensure proper logging by February 26.
Agencies must inventory affected systems and apply updates by February 27.
They must report actions by March 5.
They must summarize network hardening by March 12, and funding lapses threaten CISA's workforce.