NEW: DHS Office of Intelligence and Analysis would be absorbed into DHS HQ under a consolidation plan proposed in fiscal year 2027 budget, setting up a potential showdown with Congress in the coming months over the office’s organization and authority: www.nextgov.com/policy/2026/...

Suspected China breach of FBI system likely revealed phone numbers of targets being monitored by the bureau, per 2 people familiar. Access to this data could help foreign intel learn who the US is spying on. Confirming @jsaks.bsky.social earlier reporting: www.nextgov.com/cybersecurit...

President's FY27 budget request drops around $700 million from CISA

New: A staff report produced under the government’s top surveillance watchdog largely praised the value of a controversial spying power set to lapse later this month, raising concerns from civil liberties groups who question the validity of the findings. www.nextgov.com/policy/2026/...

New: Recent research published in the CIA’s Studies in Intelligence journal suggests AI could erode confidence in digital communications and spur human spying tradecraft. I spoke with author Thomas Mulligan about his findings -> www.nextgov.com/artificial-i...

The order leaves open a range of technical questions, including how records from DHS, SSA and the Postal Service would be matched and updated across systems and what security standards would govern those data streams. www.nextgov.com/digital-gove...

North Korean-aligned hackers believed to have seized widely-used Axios open-source Javascript library, Google intelligence analysts said Tuesday: www.nextgov.com/cybersecurit...

DHS drops investigation into former acting CISA chief’s failed polygraph exam, confirming @jsaks.bsky.social www.nextgov.com/cybersecurit...

FBI says it’s “aware of malicious actors targeting Director Patel’s personal email information, and we have taken all necessary steps to mitigate potential risks associated with this activity.” Adds the leaks are “historical in nature and involves no government information.”

The leaks appear to be authentic, according to a person familiar with the matter who requested anonymity because they weren’t authorized to publicly discuss details of the breach. www.nextgov.com/cybersecurit...

At RSAC Conference, it was a privilege to moderate this panel on the future of the CVE program. Coverage of the discussion here —> www.nextgov.com/cybersecurit...

Rapid7 links BPFDoor deployments on telco networks to Chinese APT Red Menshen www.rapid7.com/blog/post/tr...

New: ODNI is developing a policy framework and standards to speed AI adoption for cybersecurity and other tech tools across the spy agencies, as part of a broad cybersecurity and IT modernization effort launched last year, according to an official -> www.nextgov.com/artificial-i...

At RSAC Conference —> European officials highlight private sector help in major cybercrime takedowns: www.nextgov.com/cybersecurit...

POTUS publicly weighs in on FISA 702, pushing for a clean 18-month extension and keeping reforms in place adopted in 2024. In his TS post, he also says: “The fact is, whether you like it or not, it is extremely important to our military.”

Scoop -> New Cyber Command/NSA chief Gen. Josh Rudd told staff to emphasize intelligence-sharing with U.S. allies and partners, while maintaining focus on major foreign adversaries like Russia and China, despite added emphasis on border security: www.nextgov.com/people/2026/...

Treasury asks whether terrorism risk insurance program should bolster cyber coverage cyberscoop.com/treasury-ask...

Google has finally expanded on what its new disruptive cyber unit will do - it doesn't involve hacking back, as some had wondered. It's defensive-only in nature and involves, in part, doing what Microsoft has been doing for years - using court orders to take down threat actor infrastructure.

David DiMolfetta “The unit will use legal authorizations and technical capabilities to impede cyber threat groups, though company execs say it will not go so far as to hack into adversaries' systems.” www.nextgov.com/cybersecurit... @ddimolfetta.bsky.social

At RSAC Conference —> Google’s threat intelligence arm officially launched its anticipated disruptive cyber unit on Monday, which comes as the Trump admin seeks to create a more offensive, proactive US culture against hackers. www.nextgov.com/cybersecurit...

“U.S. intelligence agencies may now face legal hurdles in directly targeting and collecting personal data on Valencia González because of his place of birth.” www.wsj.com/world/americ...

Gabbard said it’s “not the intelligence community’s responsibility to determine what is and is not an imminent threat” and that the president has authority to make such conclusions. www.nextgov.com/defense/2026...

Sen. Ossoff gets at crux of issue w/ DNI Gabbard: He asks if there was an "imminent nuclear threat" posed by Iran, per WH statement. Gabbard responds: "It is not the intelligence community's responsibility to determine what is and is not an imminent threat."

Ratcliffe to Sen. Reed: Iran is "requesting intelligence assistance from Russia, from China and from other adversaries of the United States" but declines to mention in public session if they actually are. Adds: "I know the answer, and happy to discuss that" in classified setting.

CIA's Ratcliffe tells Sen. Rounds that Iran is "incapable of enriching uranium to 60%" because of Operation Midnight Hammer last year. Whether Iran's nuclear capabilities were "obliterated" has been a major flashpoint in lead-up to recent Iran war: www.nextgov.com/defense/2025...

Gabbard, asked by Sen. King about Russia sharing intelligence with Iran, says any discussion on that would be better in the follow-up closed session typically held after the public intelligence hearing. Gabbard defers to DOD and says any support Iran is receiving is not inhibiting U.S. operations.

Just now -- CIA Director Ratcliffe tells Sen. Cornyn he disagrees with Joe Kent's resignation letter yesterday saying that Iran didn't pose an imminent threat to the U.S. -- says "intelligence reflects the contrary." www.nextgov.com/people/2026/...

Remarkable omission, and not one that reflects the opinion of any independent expert.

The 2026 Annual Threat Assessment does not mention any foreign adversaries having interest in US election matters. Historically, past WTA reports have said Russia and other major nation-states view US elections as opportunities for malign influence: www.intelligence.senate.gov/wp-content/u...

National Cyber Director Cairncross said he doesn't intend for private sector to fully engage in offensive cyber ops on behalf of US government. “I’m not talking about private sector, industry or companies engaged in a cyber offensive campaign.” -> www.nextgov.com/cybersecurit...

Gabbard, who Joe Kent reported to, is expected to testify with other top NatSec officials before the Senate Intelligence Committee tomorrow. In the past, she has campaigned against U.S. overseas intervention. www.nextgov.com/people/2026/...

Expected DC weather impacts postpone House Intel worldwide threats hearing to Thursday. That means the first WWT discussion will now be on the Senate side this Wednesday: www.intelligence.senate.gov/2026/03/10/o...

Per @ddimolfetta.bsky.social: "House Homeland Security Committee staff were informed about the second polygraph exam and its results by one of the individuals placed on leave..." www.nextgov.com/people/2026/...

A letter from House Dems says CISA’s former acting director failed a second polygraph exam. House Homeland staff were informed of the second exam and its results by one of the individuals placed on leave who helped administer them, a person familiar said. www.nextgov.com/people/2026/...

Cybersecurity experts say the recent Stryker hack may be an early indicator of wider, pro-Iran cyber sabotage activity. California Rep. Eric Swalwell also told reporters Thursday that his team was in touch with the company: www.nextgov.com/cybersecurit...

FBI searches of U.S. person data collected using FISA 702 authority rose some 35% in 2025, according to an FBI letter to Congress that was obtained by Nextgov/FCW. Confirming earlier coverage from @martinmatishak.bsky.social -> www.nextgov.com/cybersecurit...

NEW: CISA says it's launched an investigation into the Stryker hack, a day after an apparent pro-Iran hacker group sabotaged employees' devices around the world. www.nextgov.com/cybersecurit...

Stryker in an 8K filing says it believes the hack is "contained" but is expected to continue causing "disruptions and limitations of access" to certain company info systems and applications supporting parts of the company's operations and functions. www.sec.gov/Archives/edg...

Pro-Iran hacking groups have made a habit of targeting any computer systems tied to nations deemed foreign adversaries to Tehran. In 2019, Stryker acquired Israeli medtech company OrthoSpace. Stryker also has contracts with DOD and the VA: www.nextgov.com/cybersecurit...

New: State Dept. officially shifted the model powering its internal StateChat chatbot from Anthropic Claude Sonnet 4.5 to OpenAI GPT 4.1, following WH directive for agencies to shed Anthropic tools, according to document we obtained. w/ @notamazonalexa.bsky.social www.nextgov.com/acquisition/...

Moments ago: The Senate confirmed Josh Rudd to lead Cyber Command and NSA, giving the digital combatant command and signals intelligence titan their first permanent leader in nearly a year: www.nextgov.com/people/2026/...

New -> Apparent Russia-linked hacking groups backing Tehran are joining the cyber activity unfolding amid the U.S.-Israel war against Iran, though experts have mixed views on whether their involvement represents a meaningful escalation. www.nextgov.com/cybersecurit...

“Unlike other Administrations, the Trump Administration will not tinker at the edges and apply partial measures and ambiguous strategies that neglect the growing number and severity of cyber threats,” the strategy reads. www.nextgov.com/cybersecurit...

The National Cyber Strategy has arrived: www.whitehouse.gov/wp-content/u...

"'We’re going from one person who didn’t care about cyber to someone who cares about it even less, if that’s possible,' a former CISA official told Nextgov/FCW, referring to Mullin’s relative lack of work in cyber policymaking." www.nextgov.com/people/2026/...

NEW: Markwayne Mullin's appointment to lead DHS is drawing mixed reactions inside CISA and the department. For some, it's a sign of relief, but others have not heard of him, or are aware of any cyber policy work his office has done. www.nextgov.com/people/2026/...

WaPo: “Russia is providing Iran with targeting information to attack American forces in the Middle East, the first indication that another major U.S. adversary is participating — even indirectly — in the war…” wapo.st/3OUfaJg

David DiMolfetta “Initial reporting tied the incident to the FBI’s wiretap systems, which are used to lawfully surveil suspected criminals and spies.” www.nextgov.com/cybersecurit...

Senate invokes first procedural step for NSA and Cyber Command nominee Josh Rudd. Recall Sen. Wyden plans to hold the nomination. A hold cannot stop a nomination outright but can delay votes. www.nextgov.com/people/2026/...