Find notable cyber news and cases, enriched with sources, timelines, and signals.

US shutdown curtails CISA and NIST cyber operations

Public Sector Action
First reported
Last updated
Happening score
H score 19
2 unique sources, 2 articles

Summary

Hide ▲

The US government shutdown has curtailed CISA operations, furloughing about 65% of the agency’s workforce and weakening federal cyber protection. An official DHS planning document says 1,651 of 2,540 CISA employees will be furloughed, while NIST will also run at sharply reduced staffing. CISA’s website will not be actively managed until funding is restored, limiting updates and inquiry handling. The cutback risks slower vulnerability response, less threat guidance, and delayed standards work for government and outside stakeholders.

Related Happenings

CISA revises CIRCIA town hall schedule

Public Sector Action
First: 26.05.2026 15:00 Last: 26.05.2026 15:00 Sources 1

About this happening: CISA **revised the schedule** for **virtual town halls** on the **CIRCIA rulemaking**, reopening stakeholder engagement on a cybersecurity reporting rule that will affect **critic...

Congress demands CISA answers on GitHub credential leak

Public Sector Action
First: 22.05.2026 19:34 Last: 22.05.2026 19:34 Sources 1

About this happening: **Lawmakers in both houses of Congress** demanded answers from **CISA** after a contractor exposed **AWS GovCloud keys** and other secrets on **public GitHub**. The letters presse...

CISA launches KEV Nomination Form

Public Sector Action
First: 21.05.2026 15:00 Last: 21.05.2026 15:00 Sources 1

About this happening: CISA launched a **new Nomination Form** for the **KEV catalog**, giving **researchers, vendors, and industry partners** a direct way to report **known exploited vulnerabilities**....

CISA releases CI Fortify guidance for critical infrastructure resilience

Public Sector Action
First: 05.05.2026 15:00 Last: 05.05.2026 15:00 Sources 1

About this happening: CISA released CI Fortify, guidance for critical infrastructure operators across sectors to help keep essential services running during cyberattack or crisis conditions. The framew...

Latest development: 06.05.2026 16:15

CISA launched CI Fortify on Tuesday as a planning framework for critical infrastructure operators in water, energy, transportation and communications to prepare for cyber disruption by disconnecting OT systems from third-party and business networks, maintaining essential services in degraded communications conditions, and recovering compromised systems through backups, component replacement, or a transition to manual operations.

CISA KEV directive for CVE-2026-20133

Public Sector Action
First: 21.04.2026 15:30 Last: 21.04.2026 15:30 Sources 1

About this happening: On **Monday, April 21, 2026**, **CISA** added **CVE-2026-20133** to the **KEV Catalog** and ordered **FCEB agencies** to secure their networks by **Friday, April 24**. The directi...

Timeline

  1. 02.10.2025 18:30 1 articles · 7mo ago

    CISA shutdown plan and website freeze

    Initial Disclosure

    A DHS planning document and a CISA website notice indicate that 1,651 of 2,540 CISA employees will be furloughed and that CISA’s website will not be actively updated until funding is enacted.

    Show sources
  2. 02.10.2025 18:30 3 articles · 7mo ago

    Shutdown begins with reduced CISA and NIST staffing

    Victim Impact Update

    At midnight EST on Wednesday, October 1, the US government shutdown takes effect, and the Department of Commerce shutdown plan leaves NIST at 34% of its workforce while federal cyber operations enter reduced staffing conditions.

    Show sources
  3. 02.10.2025 18:30 1 articles · 7mo ago

    Experts warn of phishing, ransomware, and delayed patching

    Technical Analysis Update

    Security analysts warn that reduced CISA and NIST activity may slow patching, reduce alerts about new threats and vulnerability exploits, and increase phishing, ransomware, and extortion pressure on furloughed federal workers and critical infrastructure vendors.

    Show sources