A new CISA directive requires agencies to “take steps to reduce the attack surface created by insecure or misconfigured management interfaces across certain classes of devices.”
The Binding Operational Directive 23-02 (https://www.cisa.gov/news-events/directives/binding-operational-directive-23-02), which outlines the steps required for compliance, defines a networked management interface as “a dedicated device interface that is accessible over network protocols and is meant exclusively for authorized users to perform administrative activities on a device, a group of devices, or the network itself.”
“Recent threat campaigns underscore the grave risk to the federal enterprise posed by improperly configured network devices,” the directive states.
SUSE Report Reveals Cloud Security Concerns
The majority of IT teams (88%) experienced at least one cloud security incident in the past year, according to a recent report released by SUSE (https://www.prnewswire.com/news-releases/suse-releases-securing-the-cloud-industry-trend-report-revealing-challenges-that-threaten-cloud-adoption-301854386.html).…
You're reading a preview of
ADMIN Network & Security (Digital) - 1 Issue, July/August 2023