CISA Sets Oct. 29 Deadline for Federal Agencies to Fix Critical PHP Flaws Oct 27, 2026 | 4:30 pm CISA gave federal civilian agencies until Oct. 29 to remediate two flaws in the widely used web programming language. Experts said agencies must also determine whether attackers have already exploited the flaws. […]
CISA Strategy Prioritizes Proactive Cyber Defense, Highest-Risk Infrastructure Oct 26, 2026 | 4:17 pm The agency’s 2030 roadmap calls for stronger operational technology security, intelligence-driven risk decisions, and expanded emergency communications capabilities. […]
CISA Urges Immediate Patching of Critical PHP Flaws Oct 21, 2026 | 4:06 pm Attackers could exploit flaws in the widely used web-development language to execute code remotely without authentication. Organizations including OpenAI coordinated a response to the flaws over two months. […]
CISA Readies CI Fortify Cyber Recovery Exercises Oct 13, 2026 | 3:42 pm Acting CISA Director Nick Andersen says upcoming tabletop exercises will help critical infrastructure operators test their ability to recover from cyberattacks and maintain essential services. […]
CISA Preps CI Fortify Recovery Guidance, Urges Testing Sep 21, 2026 | 3:32 pm The forthcoming guidance will draw on CISA assessments of how well critical infrastructure organizations can isolate and recover systems. […]
House Dems Introduce Bill to Assess CISA Workforce Gaps Sep 21, 2026 | 3:29 pm The bill would direct CISA to assess workforce and resource gaps as lawmakers scrutinize the agency’s capacity to defend federal networks and critical infrastructure. […]
CISA Flags Actively Exploited Cisco ISE Flaw With No Workaround Sep 18, 2026 | 4:21 pm Federal agencies face a Sept. 19 remediation deadline for a maximum-severity authentication bypass that can give remote attackers root-level access. […]
CISA, NIST Finalize Cloud Identity Token Security Guidelines Sep 15, 2026 | 4:05 pm The new guidance offers federal agencies and cloud providers recommendations to protect identity and access tokens from theft, forgery, and misuse. […]
CISA Looks to Scale SIEM as a Service Across Federal Agencies Sep 15, 2026 | 2:50 pm CISA is ramping up staffing and 24/7 support for the new service as officials look to expand governmentwide cyber visibility and give agencies a lower-cost path to modern SIEM capabilities. […]
CISA Chief Warns Cyber Threats Put Americans’ Way of Life at Risk Sep 10, 2026 | 9:23 am Andersen said CISA must focus limited resources on the nation’s most consequential cyber risks as the agency moves to rebuild its depleted workforce. […]
House Democrats Ask GAO to Examine CISA Staffing Cuts Aug 21, 2026 | 3:45 pm Lawmakers say reductions at the cybersecurity agency raise concerns about its ability to protect federal networks and critical infrastructure and respond to evolving threats. […]
Feds Warn of Active Cyber Threat Targeting Siemens Devices Aug 21, 2026 | 11:22 am Federal agencies warn AI-assisted hacking tools are lowering barriers to attacks on industrial control systems used across critical infrastructure. […]
CISA Rolls Out Cybersecurity Resource Package for K-12 Schools Aug 12, 2026 | 3:41 pm CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats. […]
CISA, FBI Warn Gunra Ransomware Targets Critical Infrastructure Aug 10, 2026 | 3:44 pm Cyber agencies warn that Gunra ransomware affiliates are exploiting internet-facing vulnerabilities to steal and encrypt data across critical infrastructure sectors. […]
CISA Urges Water Utilities to Disconnect Exposed Systems Jul 31, 2026 | 3:40 pm CISA is warning water utilities to secure internet-exposed systems after recent cyberattacks disrupted operations in multiple states. […]
Bipartisan Bill Would Expand K-12 Cybersecurity Support Jul 29, 2026 | 3:39 pm The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks. […]
CISA Details Lessons Learned From GitHub Credentials Leak Jul 13, 2026 | 2:24 pm After a contractor exposed sensitive credentials in a public GitHub repository earlier this year, CISA is outlining how it responded and the security changes it says are needed to prevent similar incidents. […]
CISA Eyes September Date for Final Cyber Incident Reporting Rule Jul 7, 2026 | 3:44 pm The regulation would require critical infrastructure entities to report major cyber incidents and ransomware payments to the federal cyber defense agency under a 2022 law. […]
Mullin: DHS Plans to Rebuild CISA Workforce After Director Confirmation Jun 30, 2026 | 2:14 pm The Homeland Security secretary told lawmakers CISA plans to hire about 600 employees after the Senate confirms a new director. […]
CISA Releases Guide to Help Agencies Transition to Zero Trust Jun 24, 2026 | 3:54 pm The new guidance aims to help federal civilian agencies move beyond perimeter-based security models and use TIC 3.0 flexibilities to advance zero trust adoption. […]
Warner Wants Data on CISA Workforce Cuts, Regional Operations Jun 17, 2026 | 3:46 pm Warner wants CISA to detail staffing losses, regional vacancies, and cybersecurity service impacts amid workforce reductions and proposed budget cuts. […]
CISA Orders Agencies to Update Their Vulnerability Management Policies Jun 10, 2026 | 3:24 pm CISA’s new directive sets tiered remediation timelines for federal agencies, including a three-day deadline for the highest-risk vulnerabilities. […]
CISA’s CDM Chief Cites Major Progress in EDR Deployment Jun 10, 2026 | 2:00 pm Program manager Matt House says the agency has completed efforts to help federal agencies deploy endpoint detection and response tools, marking a key milestone for the CDM Program. […]
CISA Begins Hiring Push for 329 Employees, With 180 Job Offers Expected This Month Jun 9, 2026 | 12:29 pm Acting Director Nick Andersen said CISA is accelerating hiring, with 180 tentative offers expected by month’s end and hundreds of new employees slated to join the agency. […]
CISA Prepares Wave of AI Initiatives Following New Executive Order Jun 4, 2026 | 3:30 pm The agency plans to unveil federal AI platform access, binding operational directives, and broader cybersecurity reforms following this week’s AI executive order. […]
CISA Sets CIRCIA Town Hall Meetings for June 15-18 May 27, 2026 | 3:08 pm CISA will hold virtual town hall meetings June 15-18 to gather stakeholder feedback on proposed CIRCIA rules requiring critical infrastructure operators to report cyber incidents within 72 hours and ransomware payments within 24 hours. […]
CISA Eyes New Working Group to Bolster Critical Infrastructure Defense May 22, 2026 | 3:45 pm CISA is exploring a new intergovernmental working group to help government and industry jointly address evolving cyber risks to critical infrastructure. […]
CISA Debuts New Vulnerability Reporting Form May 22, 2026 | 2:14 pm CISA is expanding its vulnerability disclosure efforts with a new online submission tool designed to accelerate reporting of known exploited cyber flaws. […]
Bacon, Walkinshaw Push Congress to Strengthen CISA Amid Rising AI Cyber Threats May 21, 2026 | 2:32 pm Lawmakers warn that cuts to CISA could leave critical infrastructure and local governments exposed as AI-powered cyber threats become faster and harder to stop. […]
Senator Wants Answers on CISA’s Alleged Credentials Leak May 20, 2026 | 10:36 am A contractor reportedly exposed CISA and DHS credentials on a public GitHub repository. The lapse comes amid internal upheaval at CISA and threats against U.S. critical infrastructure. […]