Loading story…
CISA is considering hiring a contractor to manage enterprise purchases of cybersecurity software and related tools through a single acquisition mechanism, a move that would cover roughly $600 million in annual spending and could reach $6 billion over the life of a contract. The agency launched the effort through a sources sought notice issued on August 12 and is conducting market research and acquisition planning with the General Services Administration’s Assisted Acquisition Services team.
The contemplated support would include procurement assistance, enterprise license management, software asset management, vendor management, analytics, and strategic buying advisory services. The plan is tied to CISA’s shift away from the Continuous Diagnostics and Mitigation program’s approved product list toward a new Cyber Product List and Technical Capability Catalog, which would guide future enterprise cyber software procurements across the agency.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
On August 12, CISA launched a sources sought notice to evaluate acquisition approaches for managing cybersecurity software and related tool purchases through a single mechanism. The effort is tied to roughly $600 million in annual cyber software purchases and could scale over the contract lifecycle if established.
See what this changes for your reporting obligations and which controls it puts on the clock.
3 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcemalware.news
Open sourcenextgov.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A DHS “minibus” appropriations package would direct the Cybersecurity and Infrastructure Security Agency (**CISA**) to maintain “sufficient” staffing to execute its statutory missions, including support to federal civilian agencies and state/local/tribal/territorial partners. The accompanying congressional language also calls for maintaining at least **10 regional field offices** and having at least **one Cyber Security Advisor per state or territory**, while continuing to fund election security activities (including regional election security advisers and the Elections Infrastructure ISAC). The bill would provide **$2.6B for CISA**, down from roughly $3B previously cited in the reporting. The same funding package would extend authorization for the **Technology Modernization Fund (TMF)**—which had lapsed—through **Sept. 30** (end of FY2026), enabling continued federal IT modernization investments that are often tied to cyber risk reduction. It would also extend several cybersecurity-related statutory authorities, including the **Cybersecurity Information Sharing Act of 2015**, preserving a legal framework for private-sector sharing of cyber threat intelligence with U.S. government entities under specified liability protections. Separately, CISA leadership turmoil was reported as internal pushback halted an attempted management-directed reassignment of CISA CIO **Robert Costello**, adding to concerns about decision-making and stability amid ongoing pressure from persistent threats to federal networks and critical infrastructure.
Jun 29, 2026
**CISA** released an initial procurement-oriented list of hardware and software product categories that already support, or are expected to support, **post-quantum cryptography (PQC)** standards, aiming to help federal agencies and other organizations plan technology refreshes and investment strategies as quantum computing advances. The guidance highlights common government-purchased technology areas where PQC is described as “widely available,” including cloud services (*PaaS/IaaS*), collaboration and messaging software, web software (browsers/servers), endpoint security (e.g., full-disk and at-rest encryption), and networking hardware/software, with emphasis on PQC use for **key establishment** and **digital signatures**. The publication aligns with US government direction to migrate high-value systems toward quantum-resistant cryptography, driven by concerns that adversaries may **harvest encrypted data now** for future decryption once a cryptographically relevant quantum computer emerges. Reporting also notes the list was developed in coordination with the **NSA** and is intended to be updated over time; some security professionals have questioned how actionable the guidance is for real-world procurement and migration planning, given the complexity and cost of transitioning cryptographic dependencies across large technology stacks.
Jun 29, 2026
The **Cybersecurity and Infrastructure Security Agency (CISA)** announced it will hold sector-by-sector virtual town halls to gather additional industry feedback on its long-delayed rulemaking under the **Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)**. The proposed regulation would require covered critical infrastructure entities to report **significant cyber incidents within 72 hours** and **ransomware payments within 24 hours**, but key details—such as which entities are covered, how to treat small businesses, what incident examples trigger reporting, and how to avoid conflicts with existing regulatory regimes—remain contentious and are a focus of the sessions. Separately, CISA leadership briefed staff on an impending **Cybersecurity Division reorganization** driven by resource constraints, including plans to **deprioritize or shut down some programs** to concentrate on higher-profile goals such as **operational technology (OT) security** and core national cyber defense functions. The internal messaging emphasized doing more with fewer personnel following a period of layoffs, retirements, and other disruptions, while refocusing the division on delivering actionable cyber intelligence to partners and coordinating broader “national cybersecurity defense” planning and operations.
Jun 29, 2026