Cybersecurity

Inside America’s next information war

Washington is paring back its defenses against influence operations, even as adversaries supercharge them with AI. Much of the fight is shifting to the private sector.

Cybersecurity

Multiple CISA divisions targeted in shutdown layoffs, people familiar say

CISA units including its Stakeholder Engagement division are believed to have been hit. A DHS spokesperson said that the RIFs are meant to help get CISA “back on mission.”

Cybersecurity

Senator makes new attempt to extend cyber info-sharing law by 10 years

Sen. Gary Peters, D-Mich., said he’s spoken directly with Senate Majority Leader John Thune, R-S.D., about renewing the 2015 Cybersecurity Information Sharing Act, which lapsed when the government shut down.

People

Hundreds of DHS staff face reassignments to border security, immigration

Affected workers — including people in the Cybersecurity and Infrastructure Security Agency — have been given a week to respond or risk termination from federal service.

People

DHS intelligence office sent deferred resignation offers to shed staff in recent months

The DHS Office of Intelligence and Analysis is working to incrementally reduce the size of its workforce, following plans for mass cuts that faced severe pushback from stakeholders over the summer.

People

Keep Senate confirmation for top intelligence lawyers, civil liberties groups urge

A provision in the 2026 annual intelligence community bill would lift Senate confirmation rules for the chief counsels of the CIA and ODNI. Advocates warn the change would weaken transparency and public oversight of the intelligence community.

Cybersecurity

Attorneys scramble to advise clients after lapse of key cyber info-sharing law

Organizations may lean on contract arrangements to facilitate data-sharing channels previously enabled by the now-expired regulation, a former U.S. official said.

Defense

DOD would curtail long-term intelligence work during government shutdown

Routine spying activities conducted by NSA, the National Geospatial-Intelligence Agency and others would continue, but some forward-looking intelligence planning would be halted, a department document shows.

Cybersecurity

Shutdown could erode cyber defenses by sidelining critical staff, experts warn

A government shutdown would also occur in parallel with the lapse of a critical cyber information-sharing law that could create legal liabilities for companies who send threat data to feds.

Exclusive Cybersecurity

‘Widespread’ breach let hackers steal employee data from FEMA and CBP

A Citrix vulnerability — suspected to have led to firings of multiple FEMA technology staff — enabled the breach, which let hackers pilfer data from FEMA servers connected to states at the southern border.

Cybersecurity

Vital cyber data-sharing law appears likely to expire amid looming government shutdown

Law firms are advising clients to prepare for this possibility, although the extent of information sharing that will cease if the law lapses remains unclear.

Cybersecurity

CISA issues emergency patching directive for Cisco devices on federal networks

An emerging cyber threat group is exploiting vulnerabilities in Cisco devices, both the company and CISA said. The hackers have potential links to China, according to an analysis put out last year.

Cybersecurity

CISA wants more international involvement in cyber vulnerability catalog, official says

Nick Andersen, the agency’s assistant executive director for cybersecurity, says the CVE project would benefit from a "more holistic look" with international partners.

Cybersecurity

House funding extension tacks on two-month reprieve for key cybersecurity laws

The short-term measure gives lawmakers extra time to iron out differences between House and Senate versions of the renewal.

Cybersecurity

Senators call for election security briefing as major races draw closer

“We are concerned that you may have directed the Intelligence Community (IC) to cease its intelligence reporting on this vital topic,” the senators wrote to the director of national intelligence in a Monday letter.

Cybersecurity

CISA ready to accept any extension for key cyber info-sharing law, official says

“Give us two years. Give us ten years. Give us 50. Whatever you take, we’ll take it,” CISA’s Nick Andersen said of the soon-to-expire 2015 Cybersecurity Information Sharing Act.

Cybersecurity

CISA weighs ‘alternative funding sources’ to preserve cyber vulnerability-tracking project

The Common Vulnerabilities and Exposures Program almost lapsed in April, according to MITRE, a key funder.

People

Federal deputy CIO leaving government for private sector role

OMB did not respond to a request for comment about who will replace Drew Myklegard at the agency.

Cybersecurity

US can focus on both offensive and defensive cyber, top NSC official says

Offensive measures are “an important tool of the toolbox that we’ll be unafraid to use,” Alexei Bulazel said. “But that’s not to say we don’t need to do normal blocking-and-tackling cyber defense.”