CISA is rolling out its ransomware warning program soon

More help against ransomware is on the way

When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

The Ransomware Vulnerability Warning Pilot (RVWP), a free program from the US government’s Cybersecurity and Infrastructure Security Agency (CISA) that aims to help businesses reduce the chances of catchingransomware, has been such a success that it will see a wider launch soon.

Currently in the pilot stage, RVWP works by notifying member organizations of vulnerabilities in the software they use, and which ransomware groups are actively exploiting.

In ablog post, CISA said that through RVWP, more than 1,700 notifications were sent out last year. Roughly half (49%) of the threats were then mitigated through patching, pulling vulnerable endpoints off the internet, or various workarounds.

Pilot ending by 2025

Pilot ending by 2025

“Organizations participating in this no-cost service typically reduce their risk and exposure by 40% within the first 12 months and most see improvements in the first 90 days,” CISA said.

The pilot program is free and available for everyone who wants to participate.

CISA also says that it is capable of notifying even those organizations who are not rolled in, as long as their vulnerable servers can be found, and identified, on search engines such as Shodan. Ultimately, if the identity of the vulnerable organization is hidden, CISA can issue a subpoena to notify them of the risk.

Currently, more than 7,600 organizations are signed up, CISA concluded.

Are you a pro? Subscribe to our newsletter

Are you a pro? Subscribe to our newsletter

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

The pilot is expected to conclude by the end of the year, after which it should become fully operational. “The warning pilot is focused on reducing the prevalence of ransomware by using our vulnerability scanning tools to let businesses know if they have vulnerabilities that need to be patched,” CISA Director Jen Easterly toldCyberScoop.

With ransomware threats constantly rising, and evolving to become more dangerous by the day, these types of programs can make plenty of difference.

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

A new form of macOS malware is being used by devious North Korean hackers

Scammers are using fake copyright infringement claims to hack businesses

Belkin’s Travel Bag for Vision Pro has pockets and is way cheaper than Apple’s own case