Loading story…
The CyberCorps: Scholarship for Service program, a key initiative for training and placing cybersecurity talent in federal government roles, has been severely impacted by recent federal hiring freezes. These employment logjams have left many program graduates unable to secure required government positions, jeopardizing the future of the cybersecurity workforce pipeline and placing financial burdens on recruits who depend on the program for tuition and stipends. The program, established in 2000 and supported by the Office of Personnel Management and the National Science Foundation, requires scholars to attend a major career fair in Washington, D.C., where federal agencies typically recruit new talent, but the current hiring environment has undermined these opportunities.
The challenges facing the CyberCorps program are part of a broader issue affecting state and federal cybersecurity capacity. Experts highlight that federal workforce and spending cuts are also hampering states' abilities to address cyber threats, making it more difficult to recruit and retain skilled personnel. Discussions around state-level cyber corps and volunteer programs have intensified as states seek alternative ways to bolster their cyber defenses in the face of federal constraints. The ongoing disruption to the federal cybersecurity talent pipeline raises concerns about the long-term resilience of both federal and state cyber operations.
See the actors and campaigns active against you right now.
5 events from the most recent confirmed update back to the earliest known activity.
The CyberCorps: Scholarship for Service program immediately changed its recruitment standards so new applicants must demonstrate plans to develop competencies at the intersection of artificial intelligence and cybersecurity. The shift followed an NSF solicitation issued in February that restructured the program around AI-cyber integration amid concerns that graduates without AI background may soon be less employable.
CISA reversed plans to bring on roughly 100 CyberCorps: Scholarship for Service summer interns after the Department of Homeland Security remained unfunded for about two months. Emails cited in the report said the agency could no longer onboard interns this summer and would shift away from SFS internships because of the funding lapse.
The Trump administration proposed cutting CyberCorps: Scholarship for Service funding by 65% in fiscal 2026, raising concerns about the program's long-term viability. Policy experts and lawmakers warned the reduction could damage federal cybersecurity workforce recruitment and trust in the program.
Affected CyberCorps students said that if they cannot obtain qualifying government employment within 18 months, their scholarships could be converted into loans, potentially leaving them with six-figure debt. Participants also criticized program communication and support as inadequate amid the placement crisis.
Federal hiring freezes and related budget constraints led agencies to rescind or halt some CyberCorps: Scholarship for Service job and internship opportunities, leaving students unable to secure required government placements. The disruption created a crisis for participants whose scholarships depend on completing public-sector service.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
7 references tracked. Mallory keeps watching after this page renders.
cyberscoop.com
Open sourcenextgov.com
Open sourcecyberscoop.com
Open sourcenextgov.com
Open sourcecyberscoop.com
Open sourcenextgov.com
Open sourcelawfaremedia.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The United States is experiencing a period of instability in its federal cybersecurity leadership, with budget cuts, leadership turnover, and shifting political priorities undermining the government's traditional role in setting national cyber strategy. Federal agencies, including the Office of the National Cyber Director, are facing funding and staffing challenges, leaving critical infrastructure operators and security professionals without consistent guidance or support. This erosion of centralized leadership is forcing the private sector and local governments to manage escalating cyber threats and operational risks independently, often without a unified national playbook. Compounding these challenges is a growing crisis in the cybersecurity workforce, as underfunded education systems and high burnout rates threaten the talent pipeline needed for national digital defense. The lack of federal investment in cyber education and workforce development is creating vulnerabilities that adversaries may exploit. Meanwhile, political divisions are evident in the debate over how to respond to major cyber intrusions, such as the China-linked Salt Typhoon campaign targeting US telecommunications networks. Lawmakers remain split on whether voluntary industry partnerships or mandated standards are necessary to address fundamental security weaknesses, highlighting the broader uncertainty in US cyber policy and enforcement.
Jun 29, 2026
The recent U.S. federal government shutdown has significantly impacted the nation's cybersecurity posture, particularly by reducing the operational capacity of the Cybersecurity and Infrastructure Security Agency (CISA) to just 35% of its workforce. This drastic reduction has strained state, local, tribal, and territorial cyber offices, which rely heavily on federal support for threat intelligence, incident response, and ongoing cybersecurity projects. Numerous projects have been stalled, and essential grant programs have been frozen, impeding the progress of critical cyber initiatives at multiple government levels. The lapse of the 2015 Cybersecurity Information Sharing Act during the shutdown has further hindered the timely exchange of threat intelligence, leaving many organizations less prepared to respond to emerging threats. In the healthcare sector, the shutdown has increased cybersecurity risks by depriving smaller providers of access to CISA's free tools and alerts, which are vital for defending against ransomware and other cyberattacks. The slowdown in HIPAA investigations and breach reporting has created additional vulnerabilities, as regulatory oversight and enforcement are delayed. Critical rulemaking on privacy and security has also been stalled, potentially leaving gaps in compliance and best practices. Operational technology (OT) environments, which are already challenged by outdated systems and unpatched vulnerabilities, face mounting threats as attackers exploit exposed internet-connected controls. The lack of federal support has made it more difficult for organizations to maintain visibility and proper network segmentation in these environments, increasing the risk of successful cyberattacks. The shutdown's ripple effects extend to the freezing of cybersecurity grants, which are essential for funding state and local cyber defense initiatives. The overall reduction in federal cybersecurity capacity has left many public and private sector entities more vulnerable to both opportunistic and targeted attacks. The situation underscores the critical importance of sustained federal investment and coordination in cybersecurity, especially as threat actors continue to exploit periods of government disruption. The panel of ISMG editors highlighted the urgent need for contingency planning to ensure continuity of cyber defense operations during future shutdowns. The healthcare sector, in particular, is at heightened risk due to its reliance on federal resources for both compliance and incident response. The editors also noted that the shutdown has exposed systemic weaknesses in the nation's approach to protecting aging OT infrastructure. The combination of stalled projects, reduced workforce, and frozen funding has created a perfect storm for cyber adversaries seeking to exploit gaps in U.S. cyber defenses. The long-term impact of the shutdown may include delayed recovery from incidents, increased costs for breach remediation, and a loss of public trust in the government's ability to safeguard critical infrastructure. The situation serves as a stark reminder of the interconnectedness of federal operations and national cybersecurity resilience.
Jun 29, 2026
The US federal government faced a shutdown after Congress failed to pass funding for the fiscal year 2026, directly impacting federal agencies, including the Cybersecurity and Infrastructure Security Agency (CISA). As a result of the funding lapse, the Department of Homeland Security (DHS) estimated that approximately two-thirds of CISA’s workforce, or about 1,651 out of 2,540 employees, would be furloughed, leaving only 889 personnel to continue critical operations. This significant reduction in cybersecurity staff raised concerns among government officials and cybersecurity experts about the potential for increased cyber risk to federal systems and infrastructure. The shutdown’s impact on CISA was expected to slow, but not entirely halt, ongoing cybersecurity projects and incident response capabilities. The Biden administration’s previous shutdown guidance in 2023 had anticipated a similar scale of furloughs, but the current contingency plan under the Trump administration did not specify how many employees could be recalled if needed. The lack of clarity on recallable staff heightened uncertainty about the government’s ability to respond to cyber incidents during the shutdown. Government contractors and private sector partners were advised to harden their cybersecurity postures in anticipation of reduced federal support and oversight. The shutdown served as a stark reminder of the interconnectedness between government funding and national cybersecurity readiness. Experts warned that adversaries might exploit the temporary reduction in federal cyber defenses, increasing the risk of attacks on government networks. The situation also underscored the importance of continuity planning for essential cyber operations during periods of political and fiscal instability. CISA’s diminished capacity could delay vulnerability management, threat intelligence sharing, and incident response activities across federal agencies. The shutdown’s timing coincided with ongoing cyber threats targeting critical infrastructure, amplifying the potential consequences of reduced federal cyber oversight. The uncertainty surrounding the duration of the shutdown further complicated risk assessments and response planning for both government and private sector entities. The event highlighted the need for robust contingency measures to maintain cybersecurity resilience during government funding lapses. Federal agencies and contractors were urged to review and update their incident response and business continuity plans in light of the evolving situation. The shutdown’s impact on CISA and broader federal cybersecurity operations was closely monitored by industry stakeholders and policymakers alike.
Jun 29, 2026