On October 11th, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) announced an update to anti-ransomware resources as part of the Ransomware Vulnerability Warning Pilot (RVWP). RVWP was launched in early 2023 to help CISA determines vulnerabilities that are commonly associated with known ransomware exploitation and warns critical infrastructure entities with those vulnerabilities, helping to enable mitigation before a ransomware incident occurs. Organizations now have access to this information in the known exploited vulnerabilities (KEV) catalog under “known to be used in ransomware campaigns.” CISA’s goal is to increase their detection capabilities through RVWP, which proactivity identifies systems that many contain security vulnerabilities.
