The House Homeland Security Cmte is meeting right now to, among other things, mark up a GOP bill to expand cyber scholarships. Dems supported the bill last year, but top D Bennie Thompson just urged a "no" vote, citing layoffs at CISA that he says jeopardize the bill's success.
Thompson: "In the last couple of weeks, scores of CISA employees have been laid off or placed on administrative leave. We don't know the total number, we don't know all the roles that have been cut, we don't know when the layoffs will stop, but we do know..."
"...these cuts will harm CISA's ability to carry out its responsibilities."
The New York Post first reported tonight that CISA was freezing and reviewing election security work, but we at @WIRED are the first to report on the acting CISA director's memo to staff explaining what that review will entail and why it's happening.
Per the memo, CISA will review every staff position related to election security, all services provided to election officials, and all published ES guidance, and then describe steps necessary to "correct any activities identified as past misconduct related to censorship..."
• AI Safety and Security Board
• Critical Infrastructure Partnership Advisory Council
• National Security Telecommunications Advisory Committee
• National Infrastructure Advisory Council
• USSS Cyber Investigations Advisory Board
CSRB was "less than halfway" done w/ its Salt Typhoon investigation, according to a now-former member.
"I'm hoping this is a pause, not the end," this person said. "There are still professional staff for the CSRB and I hope they will continue some of the work in the interim."
In 2021, Congress gave state and local governments $1 billion for cyber improvements.
The program has been transformative, but it expires next year. My new @TheRecord_Media story explores what it's accomplished and what will happen if it isn't renewed: therecord.media/federal-money-…
I talked to folks from @NASCIO, @NACoTweets, @CTDEMHS, and @MontanaDES about the grant program.
They all said it's been a vital lifeline for cash-strapped, hack-plagued government agencies.
It "has been a game-changer," said CT emergency management director William Turner.
There have been some state-local tensions (most of the money is earmarked for local governments, but states can decide how to provide it), and meeting the federal requirements hasn't been easy, but people who work with the program say the results have been impressive.
New from me: Inside @CISAgov as Trump prepares to take power.
Employees are worried that he'll end key projects, drive away star talent, and generally weaken the agency's role in protecting the government and the nation from hackers.
CISA staffers expect Trump to spurn efforts to raise the tech industry's security baseline.
"Compliance efforts like secure-by-design may not have the support that they currently benefit from," one employee said.
Also at risk: Election security aid and incident reporting rules.
As a U.S. cyber official put it to me of Trump's team, "They do not think it's the role of the US government to make [the] private sector act in a certain way."
The White House just held a press call to discuss the latest on China's "Salt Typhoon" hacking campaign against telecommunications companies.
New detail: "At least eight" U.S. telcos have been hacked, deputy national security adviser for cyber Anne Neuberger said.
The Salt Typhoon activity "has been underway for some time," a senior administration official said -- "likely one to two years." China has hacked telcos in "a couple of dozen" countries during that time.
"At this time, we don't believe any classified communications have been compromised," Neuberger said.