#CISA

CISA has issued an updated Insider Threat Mitigation Guide featuring new case studies and strategies to help defense, critical infrastructure, and government contracting leaders address converging physical and cyber risk vectors.

The Cybersecurity and Infrastructure Security Agency is preparing a task order recompete valued over $100 million for integrated assessment and cyber hygiene services via GSA Alliant 2. The expanded vehicle supports CISA’s vulnerability management mission across federal and critical infrastructure networks.

House Democrats have called on the Government Accountability Office to investigate how deep workforce cuts at CISA impact federal network defense and critical infrastructure protection. The inquiry comes as CISA grapples with a one-third staffing reduction amid rising state-sponsored cyber threats.

The Cybersecurity and Infrastructure Security Agency has issued an urgent advisory regarding escalating cyber threats against Programmable Logic Controllers in the Water and Wastewater Systems sector. Threat actors are modifying PLC configurations, driving operational disruptions and forcing manual facility overrides.

CISA has issued comprehensive guidance on open source software security, introducing the C4 Framework for trust assessment across federal agencies and critical infrastructure. The publication outlines core risk management practices for software lifecycles, SBOM integration, and open-source AI systems.

The advisory is technical. The implication is executive: cyber insurance premiums will move within the quarter.