CISA cracks down on end-of-support edge devices.

Summary

By the CyberWire staff

CISA cracks down on end-of-support edge devices.

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a Binding Operational Directive (BOD 26-02) ordering Federal Civilian Executive Branch (FCEB) agencies to replace end-of-support (EOS) edge devices that no longer receive vendor patches. Agencies must produce an inventory of EOS devices within three months, and replace them within a year.

CISA stated, "The imminent threat of exploitation to agency information systems running EOS edge devices is substantial and constant, resulting in a significant threat to federal property. CISA is aware of widespread exploitation campaigns by advanced threat actors targeting EOS edge devices. Recent public reports of campaigns targeting certain vendors highlight actors' attempts to use these devices as a means to pivot into FCEB information system networks."

While the directive only applies to Federal agencies, other public- and private-sector organizations should follow similar best practices regarding unsupported products.

Secure enterprise AI with Glean and Palo Alto Networks, live on Feb 26

Security leaders are under pressure to move fast on AI while keeping firm control over risk. On February 26 at 10:30 AM PT, join security leaders from Glean and Palo Alto Networks for a live fireside chat on securing enterprise AI. Learn what to secure across the AI lifecycle—from models and data to agents—and the practical guardrails Security should own to reduce risk without slowing the business.

Romania’s oil pipeline operator discloses cyberattack.

Romania’s national oil pipeline operator, Conpet, has disclosed that a cyberattack disrupted its IT systems earlier this week, the Record reports. The company said the attack did not affect its operational technology (OT) or SCADA systems. Conpet said in a statement on Facebook, "The incident does not affect the operational activity, the stability of the company, or the ability of the entity to fulfill its contractual obligations."

The Record notes that the Qilin ransomware group listed Conpet on its leak site this week, claiming to have stolen a terabyte of data. Conpet's website is still down as of today.

Experience the Power of Community at RSAC 2026 Conference

RSAC™ 2026 Conference returns to San Francisco March 23–26, bringing together the global cybersecurity community for four days of expert insights, hands-on learning, and breakthrough innovation. Join thousands of practitioners, executives, and innovators as they tackle today’s toughest challenges and explore solutions shaping tomorrow. From cutting-edge ideas to immersive programs and vibrant networking, this is where meaningful progress happens. Register today and be part of the conversations driving cybersecurity forward.

Flickr notifies users of potential breach.

Photography platform Flickr is informing users that their data may have been exposed due to a vulnerability at a third-party email service provider, BleepingComputer reports. The affected data includes full names, email addresses, IP addresses, and account activity. The company didn't disclose which email provider was involved, but said it "shut down access to the affected system within hours of learning about it." Flickr warns users to be on the lookout for phishing attempts using the exposed information.

Attacks, Threats, and Vulnerabilities

Hacking GitHub Codespaces via VS Code Defaults: A Supply-Chain Attack Vector (Orca Security) Orca Research reveals how GitHub Codespaces enables RCE via malicious VS Code configs. Discover how attackers steal secrets and how to secure your pipelines.

Trends

Gartner Identifies Critical GenAI Blind Spots That CIOs Must Urgently Address (Gartner) Gartner, Inc., a business and technology insights company, identified critical blind spots stemming from overlooked risks and unintended consequences of generative AI (GenAI) adoption. Chief information officers (CIOs) must proactively address these hidden challenges to ensure GenAI value realization and avoid AI project failures.

Products, Services, and Solutions

Bitdefender AI Skills Checker for OpenClaw (Bitdefender) Bitdefender AI Skills Checker is a free tool for validating OpenClaw AI skills in ClawHub and identifying security risks prior to deployment.

Litigation, Investigation, and Law Enforcement

EU says TikTok faces large fine over "addictive design" (BleepingComputer) The European Commission said today that TikTok is facing a fine because its addictive features, including infinite scroll, autoplay, push notifications, and personalized recommendation systems, are breaching the EU's Digital Services Act (DSA).

Industry Events

For a complete running list of events, please visit the Event Tracker.

Newly Noted Events

State of the Net (Virtual and Washington, DC, USA, Feb 9, 2026) Annually attracting over 600 attendees, the State of the Net Conference provides unparalleled opportunities to network and engage on key policy issues. It is also the only Internet policy conference with over 50 percent of Congressional staff and government policymakers in attendance, making it the perfect setting to explore important, emerging trends. The State of the Net Conference Series is hosted by the Internet Education Foundation, a 501(c)(3) non-profit organization dedicated to educating the public and policymakers about the potential of a decentralized global Internet to promote communications, commerce and democracy. IEF works closely with leaders on Capitol Hill and in the private sector to host the most important debates in Internet policy.

Events

State of the Net (Virtual and Washington, DC, USA, Feb 9, 2026) Annually attracting over 600 attendees, the State of the Net Conference provides unparalleled opportunities to network and engage on key policy issues. It is also the only Internet policy conference with over 50 percent of Congressional staff and government policymakers in attendance, making it the perfect setting to explore important, emerging trends. The State of the Net Conference Series is hosted by the Internet Education Foundation, a 501(c)(3) non-profit organization dedicated to educating the public and policymakers about the potential of a decentralized global Internet to promote communications, commerce and democracy. IEF works closely with leaders on Capitol Hill and in the private sector to host the most important debates in Internet policy.

HIP Europe 26 (Frankfurt, Germany, Feb 10, 2026) Get ready to elevate your identity security skills at HIP Europe — your gateway to becoming a Hybrid Identity Protection (HIP) Hero. With the departure of original Active Directory experts and the rise of identity as the primary attack surface, the need for identity threat detection and response (ITDR) talent has never been greater. This event is the perfect opportunity to enhance your (or your team's) ITDR strategy and strengthen your organization's operational resilience.

Wild West Hackin’ Fest @ Mile High 2026 (Denver, Colorado, USA, Feb 11 - 13, 2026) More than just a conference, Wild West Hackin’ Fest (WWHF) is committed to offering high quality information security education to beginners and seasoned professionals alike. With reasonably priced training, conferences, hands-on labs, and workshops, WWHF lowers the barrier to entry for those seeking to enter into the world of information security. WWHF also offers a venue for those already established in the industry to share ideas, give back, and continue learning.

AI SOC Summit (Tysons, Virginia, USA, Mar 3, 2026) For Security Teams who use AI and defend AI deployments: There is a lot of AI hype for Sec Ops. Come hang out as early adopters of AI dive into the good, the bad and the ugly . No vendor pitches, no AI theory. If you are trying out AI products for Sec Ops or building them in house, this is the place for you.

RSAC 2026 (San Francisco, California, USA, Mar 23 - 26, 2026) Ideas become breakthroughs when shared. Challenges become opportunities when tackled together. That’s the Power of Community—a key focus for RSAC™ 2026 Conference. Real change happens when cybersecurity professionals unite.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.

Daily Briefing for 02.06.26

Top stories.

CISA cracks down on end-of-support edge devices.

Romania’s oil pipeline operator discloses cyberattack.

Flickr notifies users of potential breach.

Notes.

Attacks, Threats, and Vulnerabilities

Trends

Products, Services, and Solutions

Litigation, Investigation, and Law Enforcement

Newly Noted Events

Events