#CISA

NIST, NSA, and CISA have jointly issued ten voluntary practices designed to manage AI models acting outside operator controls during frontier training and testing. The guidance establishes operational baselines for defense contractors, federal agencies, and technology vendors deploying autonomous systems.

Federal agencies face severe operational delays in post-quantum cryptography migration unless public key infrastructure and smart identity cards are updated concurrently. DoD, CISA, and NIST experts warn that legacy authentication credentials threaten to stall broader quantum-resistant encryption efforts.

A flurry of new bipartisan legislation aims to enforce agency AI disclosures, establish a dedicated CISA AI task force, and hold commercial developers legally liable for autonomous AI harm, signaling an aggressive push for federal governance and risk management.

A joint security advisory from CISA, the FBI, the NSA, and international partners warns that Chinese state-sponsored threat actors are utilizing Integrity Technology Group assets to conduct stealthy edge-device intrusions targeting global critical infrastructure networks.

CISA has released new technical guidance pairing cyber decoy assets with zero trust models, enabling critical infrastructure operators and defense leaders to detect living-off-the-land intrusion tactics.

CISA has issued an updated Insider Threat Mitigation Guide featuring new case studies and strategies to help defense, critical infrastructure, and government contracting leaders address converging physical and cyber risk vectors.

The Cybersecurity and Infrastructure Security Agency is preparing a task order recompete valued over $100 million for integrated assessment and cyber hygiene services via GSA Alliant 2. The expanded vehicle supports CISA’s vulnerability management mission across federal and critical infrastructure networks.

House Democrats have called on the Government Accountability Office to investigate how deep workforce cuts at CISA impact federal network defense and critical infrastructure protection. The inquiry comes as CISA grapples with a one-third staffing reduction amid rising state-sponsored cyber threats.

The Cybersecurity and Infrastructure Security Agency has issued an urgent advisory regarding escalating cyber threats against Programmable Logic Controllers in the Water and Wastewater Systems sector. Threat actors are modifying PLC configurations, driving operational disruptions and forcing manual facility overrides.

CISA has issued comprehensive guidance on open source software security, introducing the C4 Framework for trust assessment across federal agencies and critical infrastructure. The publication outlines core risk management practices for software lifecycles, SBOM integration, and open-source AI systems.

The advisory is technical. The implication is executive: cyber insurance premiums will move within the quarter.