Thehackernews

CISA Retires Ten Emergency Cybersecurity Directives from 2019-2024

First seen 9 Jan 2026, 12:48 UTC • Cisa

+1 •40.4

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Cybersecurity and Infrastructure Security Agency (CISA) has retired ten emergency directives issued between 2019 and 2024. These directives were part of efforts to address evolving cybersecurity threats, including those posed by modern cyberattacks that exploit trusted tools and workflows. The retirement marks a significant shift in federal cybersecurity strategy as the agency adapts to new challenges such as the rise of agentic AI and shadow API keys.

How this analysis works

Attack Flow

11 entities, 18 inferred relationships (STIX 2.1).

Organization (3)

Microsoft
SolarWinds
Cisco

Vulnerability (3)

CVE-2025-20333
CVE-2025-20362
Netlogon Elevation Of Privilege Vulnerability

Affected Platform (4)

Microsoft Exchange
Pulse Connect Secure
Windows
Windows Server

Tool (1)

VMware

Relationships

VMware exploits CVE-2025-20333
VMware exploits CVE-2025-20362
VMware exploits Netlogon Elevation Of Privilege Vulnerability
CVE-2025-20333 targets Microsoft Exchange
CVE-2025-20333 targets Pulse Connect Secure
CVE-2025-20333 targets Windows
CVE-2025-20333 targets Windows Server
CVE-2025-20362 targets Microsoft Exchange
CVE-2025-20362 targets Pulse Connect Secure
CVE-2025-20362 targets Windows
CVE-2025-20362 targets Windows Server
Netlogon Elevation Of Privilege Vulnerability targets Microsoft Exchange
Netlogon Elevation Of Privilege Vulnerability targets Pulse Connect Secure
Netlogon Elevation Of Privilege Vulnerability targets Windows
Netlogon Elevation Of Privilege Vulnerability targets Windows Server
CVE-2025-20333 related to Microsoft
CVE-2025-20333 related to SolarWinds
CVE-2025-20333 related to Cisco

Continue Reading

Microsoft Office 0-day Vulnerability CVE-2026-21509 Exploited; Emergency Fix Released Microsoft SharePoint Attacks: Over 400 Victims Including US Agencies APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine Russian SVR Exploits SolarWinds and Other Vulnerabilities Against U.S. Networks FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials

CISA Retires Ten Emergency Cybersecurity Directives from 2019-2024

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading