🛡️ Security

BOD 26-04

CISA Binding Operational Directive 26-04, issued 10 June 2026, which replaced BOD 22-01. It assigns federal civilian agencies remediation deadlines of 3, 14, or 60 days based on asset exposure, KEV status, exploit automation, and post-exploitation impact, and requires forensic triage for the 3-day tier.

📚 Deep Dive

Learn Article

How to Check an Email Security Gateway for Compromise After a Zero-Day

The vendor's grep command is where the check starts, not where it ends. A root-level attacker can edit the appliance's logs, so the real evidence lives in egress, directory, and flow data.

intermediate 6 min read

Back to Glossary