CISA to scan agency networks for risky web-connected devices under latest directive

The Cybersecurity and Infrastructure Security Agency will scan the networks of federal agencies to help them identify any web-connected “networked management interfaces” that have become a key vulnerability in recent cyber exploits.

CISA laid out its plans under a binding operational directive issued today. It comes in the wake of a warning late last month from Microsoft — later amplified by CISA and other federal agencies — that an alleged Chinese state-sponsored hacking group, known as “Volt Typhoon,” has been using network administration tools to infiltrate critical infrastructure networks.