Loading story…
President Donald Trump re-nominated Sean Plankey to lead the Cybersecurity and Infrastructure Security Agency (CISA) after his prior nomination did not clear the Senate. CISA has reportedly operated without a permanent leader for about a year and has seen significant workforce reductions, while Senate dynamics (including holds tied to broader DHS disputes) continue to affect confirmation timing; the agency’s election-security responsibilities remain a politically sensitive part of its critical infrastructure mission.
Separately, the Department of Energy’s Office of Cybersecurity, Energy and Emergency Response (CESER) highlighted a shift toward AI-driven cyber defenses and backed a package of energy-sector cybersecurity bills during a House hearing. Acting CESER director Alex Fitzsimmons described the AI-FORTS initiative as an umbrella program intended to develop defensive cyber tools, support active defense measures, and counter AI-enabled offensive capabilities by threat actors, while congressional Democrats raised concerns that DOE job cuts could undermine cybersecurity and grid reliability.
See the reporting duties and controls this puts on the clock.
5 events from the most recent confirmed update back to the earliest known activity.
Sean Plankey asked President Donald Trump to withdraw his nomination to lead CISA after roughly thirteen months without Senate confirmation. The move ended his pending renomination and left the agency under acting leadership.
At a House Energy and Commerce Committee hearing, DOE official Alex Fitzsimmons endorsed congressional legislation to strengthen energy-sector cybersecurity and resilience. He said CESER is shifting toward AI-driven cyber defense, including the AI-FORTS program, while lawmakers questioned whether staffing cuts and grant disruptions would hinder execution.
President Donald Trump re-submitted Sean Plankey's nomination to the Senate after the prior nomination failed to clear the chamber by the end of the previous year. The renomination signaled the administration's continued effort to install Plankey as CISA director despite expected opposition.
After committee approval, Plankey's confirmation was delayed by Senate holds, including one from Sen. Rick Scott tied to a Coast Guard cutter contract dispute involving Eastern Shipbuilding Group. As a result, CISA remained without a Senate-confirmed director through 2025.
Sean Plankey's nomination to lead CISA moved through a Senate Homeland Security and Governmental Affairs Committee hearing and was approved by the committee in July. This marked the furthest progress of his initial nomination before it later stalled.
See what this changes for your reporting obligations and which controls it puts on the clock.
13 references tracked. Mallory keeps watching after this page renders.
darkreading.com
Open sourcenextgov.com
Open sourcescworld.com
Open sourcetherecord.media
Open sourcescworld.com
Open sourcecyberscoop.com
Open sourcenextgov.com
Open sourcecyberscoop.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The U.S. Senate confirmed Gen. **Joshua Rudd** to lead both **U.S. Cyber Command** and the **National Security Agency**, filling a dual-hatted role that had been vacant since Gen. Timothy Haugh was fired and replaced on an acting basis by Lt. Gen. William Hartman. Reporting noted some lawmakers objected to Rudd’s perceived lack of cyber experience, but the confirmation elevates him to general and restores a Senate-confirmed leader to the organizations responsible for national cyber operations and signals intelligence. Separately, the House Energy and Commerce Committee advanced a bipartisan package of **energy cybersecurity** bills aimed at strengthening defenses for U.S. critical infrastructure, particularly smaller electric utilities. The package would extend the Department of Energy’s Rural and Municipal Utility Advanced Cybersecurity program, reorganize and consolidate DOE cyber responsibilities under the Office of Cybersecurity, Energy Security and Emergency Response, and add measures to embed cybersecurity into state energy planning, clarify federal roles in oil and gas cybersecurity, and stand up a pilot **Energy Threat Analysis Center** amid concerns about state-backed activity such as **Volt Typhoon** targeting U.S. infrastructure.
Jun 29, 2026
U.S. federal cyber operations faced heightened uncertainty amid **leadership turnover and staffing reductions at CISA**, raising concerns about the agency’s capacity to execute its mission. Reporting indicated acting director **Madhu Gottumukkala** was replaced by **Nick Andersen** following controversies including alleged mishandling of sensitive information, while CISA also lost its CIO and reportedly saw staffing reduced by roughly one-third. Separately, Senate confirmation dynamics continued to affect cyber leadership, with Sen. Ron Wyden opposing the nomination of Lt. Gen. **Joshua Rudd** to lead **U.S. Cyber Command and the NSA**, citing concerns about experience and constitutional-rights familiarity as the agencies remained without a permanent chief. CISA’s policy and guidance output continued but faced headwinds from broader federal disruptions. CISA published new insider-threat program guidance centered on the **POEM framework** (*Plan, Organize, Execute, Maintain*) to help organizations build multi-disciplinary insider threat management teams spanning physical security, cybersecurity, HR/personnel, and reporting/analysis functions. At the same time, a **partial DHS shutdown** was reported to be stalling progress on the **Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)** rulemaking, complicating compliance planning for critical infrastructure entities awaiting clarity on incident reporting requirements and enforcement expectations.
Jun 29, 2026
US national security officials and lawmakers are weighing the future of key cyber and intelligence authorities and leadership posts. Lt. Gen. Josh Rudd, nominated to lead **NSA** and co-lead **U.S. Cyber Command**, told the Senate Intelligence Committee he supports **FISA Section 702**, arguing the foreign-intelligence collection authority is “indispensable” for threat insight and has “saved lives,” even as critics continue to press for warrant requirements when querying incidentally collected US-person communications. Separately, a Senate panel heard testimony describing how the US military has formalized a “**non-kinetic effects cell**” to integrate cyber operations, electronic warfare, and influence activities into mission planning and execution, with officials citing an operation in Venezuela that included cyber effects against radar, internet, and the power grid to induce a temporary blackout. A parallel policy dispute is playing out around domestic cyber defense leadership and information-sharing frameworks. An *SC Media* opinion column argues the Senate’s failure to confirm (and subsequent expiration of) Sean Plankey’s nomination as **CISA director** has prolonged a leadership vacuum during heightened critical-infrastructure risk, and it also highlights uncertainty around reauthorizing the **Cybersecurity Information Sharing Act of 2015** amid political resistance to a “clean” long-term extension. Overall, the reporting and commentary point to governance and oversight decisions—surveillance authorities, operational cyber integration, and agency leadership—that could materially affect US cyber posture, but they do not describe a discrete breach, vulnerability disclosure, or active threat campaign.
Jun 29, 2026