From blog.qualys.com
Ransomware attacks have become a growing threat to organizations of all sizes and sectors. Many of these attacks exploit known vulnerabilities, making organizations need to quickly identify and fix these weaknesses to prevent a potential ransomware incident. This is where the Ransomware Vulnerability Warning Pilot (RVWP) comes in.
RVWP, launched by the Cybersecurity and Infrastructure Security Agency (CISA), proactively identifies information systems that contain vulnerabilities commonly exploited by ransomware threat actors. Through this program, CISA will notify system owners of these vulnerabilities, enabling timely mitigation before a damaging intrusion occurs. This program utilizes existing authorities technologies and data sources, such as the Cyber Hygiene Vulnerability Scanning service and the Administrative Subpoena Authority granted to CISA under the Homeland Security Act of 2002.