[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cisa\u002Fbod-22-01":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cisa","bod-22-01","BOD 22-01","BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities",130,"US Cybersecurity and Infrastructure Security Agency (CISA)","**What it asks for.** Binding Operational Directive 22-01, issued by CISA in 2021, requires US federal civilian executive branch agencies to remediate vulnerabilities listed in the Known Exploited Vulnerabilities catalogue within the timelines set in the catalogue. It also requires agencies to review and update their vulnerability management procedures to support this.\n\n**In practice.** For agencies, compliance means tracking KEV entries against asset inventories, remediating by the due date and reporting status as required. Organisations outside its scope often adopt the same approach voluntarily: treating actively exploited vulnerabilities as a separate priority class with tighter deadlines. Evidence includes remediation timelines, exception handling records and reporting dashboards.\n\n**Common gaps.** Remediation depends on knowing where vulnerable software runs, so weak asset inventories undermine compliance. Internet facing and unmanaged systems are frequently missed.",null,"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fdirectives\u002Fbod-22-01-reducing-significant-risk-known-exploited-vulnerabilities","Read the directive at CISA","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"pan-os-zero-day-rce-exploited-in-the-wild-patch-immediately","PAN-OS Zero-Day RCE Exploited in the Wild — Patch Immediately","2026-10-15T00:20:20.763+00:00",{"slug":23,"title":24,"published_at":25},"critical-ivanti-vpn-flaw-actively-exploited-patch-immediately","Critical Ivanti VPN Flaw Actively Exploited — Patch Immediately","2026-10-14T14:22:08.582+00:00",{"slug":27,"title":28,"published_at":29},"ivanti-zero-day-exploited-for-root-level-access-patch-immediately","Ivanti Zero-Day Exploited for Root-Level Access — Patch Immediately","2026-10-14T14:21:38.001+00:00",{"slug":31,"title":32,"published_at":33},"maximum-severity-sap-oauth2-ssrf-flaw-enables-unauthenticated-credential-theft","Maximum-Severity SAP OAuth2 SSRF Flaw Enables Unauthenticated Credential Theft","2026-10-13T14:20:19.556+00:00",{"slug":35,"title":36,"published_at":37},"flax-typhoon-actively-exploits-five-known-vulnerabilities-cisa-issues-october-deadline","Flax Typhoon Actively Exploits Five Known Vulnerabilities — CISA Issues October Deadline","2026-10-09T14:20:58.177+00:00",{"slug":39,"title":40,"published_at":41},"citrix-netscaler-vulnerability-added-to-cisa-kev-catalog-amid-active-exploitation","Citrix NetScaler Vulnerability Added to CISA KEV Catalog Amid Active Exploitation","2026-10-04T20:20:18.42+00:00",{"slug":43,"title":44,"published_at":45},"cisa-flags-actively-exploited-zammad-vulnerabilities-patch-now","CISA Flags Actively Exploited Zammad Vulnerabilities — Patch Now","2026-10-02T22:20:21.075+00:00",{"slug":47,"title":48,"published_at":49},"fortinet-fortimail-zero-day-exploited-in-the-wild-before-patch-available","Fortinet FortiMail Zero-Day Exploited in the Wild Before Patch Available","2026-10-02T10:21:51.735+00:00",{"slug":51,"title":52,"published_at":53},"fortinet-fortimail-path-traversal-actively-exploited-cisa-adds-to-kev-catalog","Fortinet FortiMail Path Traversal Actively Exploited — CISA Adds to KEV Catalog","2026-10-01T22:20:55.634+00:00",{"slug":55,"title":56,"published_at":57},"critical-cisco-sd-wan-auth-bypass-exploited-in-the-wild-1790857283100","Critical Cisco SD-WAN Auth Bypass Exploited in the Wild","2026-10-01T12:21:22.632+00:00",{"slug":59,"title":60,"published_at":61},"cisco-sd-wan-vulnerability-actively-exploited-cisa-adds-to-kev-catalog","Cisco SD-WAN Vulnerability Actively Exploited — CISA Adds to KEV Catalog","2026-09-30T20:21:16.487+00:00",{"slug":63,"title":64,"published_at":65},"apple-out-of-bounds-write-flaw-actively-exploited-added-to-cisa-kev-catalog","Apple Out-of-Bounds Write Flaw Actively Exploited, Added to CISA KEV Catalog","2026-09-29T20:22:11.548+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"patch-management","Automated patch management","Known holes get closed in days, not months.",127,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",113,{"slug":78,"name":79,"problem":80,"stories":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",28,{"slug":83,"name":84,"problem":85,"stories":86},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",22,{"slug":88,"name":89,"problem":90,"stories":91},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",15,{"slug":93,"name":94,"problem":95,"stories":96},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",14,[98,104,110,116,121,126,131,136],{"family":99,"item":100,"code":101,"title":102,"together":103},"cis","7","Control 7","Continuous Vulnerability Management",129,{"family":105,"item":106,"code":107,"title":108,"together":109},"nist-800-53","si-2","SI-2","Flaw Remediation",109,{"family":111,"item":112,"code":113,"title":114,"together":115},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",87,{"family":117,"item":118,"code":119,"title":119,"together":120},"itil","overview","ITIL",70,{"family":99,"item":122,"code":123,"title":124,"together":125},"12","Control 12","Network Infrastructure Management",65,{"family":105,"item":127,"code":128,"title":129,"together":130},"ra-5","RA-5","Vulnerability Monitoring and Scanning",64,{"family":105,"item":132,"code":133,"title":134,"together":135},"sc-7","SC-7","Boundary Protection",33,{"family":137,"item":138,"code":139,"title":140,"together":141},"nist-csf","rs-mi","RS.MI-3","Mitigation (CSF 1.1)",32]