Loading story…
The Pentagon’s Cyber Mastery Incentive Pay (C-MIP) program, scheduled to launch October 1 as part of the Cybercom 2.0 force-generation overhaul, is facing criticism over projected pay cuts and uneven implementation. The program replaces disparate service-level cyber incentives with two components: Skill Incentive Pay for validated proficiency and Special Duty Assignment Pay for certain advanced-duty assignments. Internal Army comparisons indicate that many basic and senior personnel could receive less than under the legacy Cyber Assignment Incentive Pay program, with projected monthly reductions of $100 to $1,000 and some basic cyberspace operators and exploitation analysts facing the largest cuts.
The Army introduced one-year temporary rate protection to cushion reductions, while the Air Force was still finalizing its rollout shortly before launch and Navy implementation details remained in progress. Unclear communication, unfinished service-level plans and strict qualification-currency requirements have added to personnel uncertainty. Officials and experts warned that compensation disruptions could weaken morale and retention in the military cyber workforce as it confronts evolving threats and technological advances, including artificial intelligence.
See the reporting duties and controls this puts on the clock.
4 events from the most recent confirmed update back to the earliest known activity.
The Army implemented a one-year temporary rate-protection policy to mitigate anticipated compensation cuts. Affected soldiers would receive either their new C-MIP rate or half their legacy Cyber Assignment Incentive Pay rate, whichever was higher.
Lt. Gen. Christopher Eubank warned subordinate leaders that reductions from legacy incentive rates would create friction among basic and senior personnel. He also raised concerns about strict qualification-currency requirements, the apparent absence of a grace period, dependence on the JCC2-R tracking platform, and possible financial penalties for circumstances outside personnel’s control.
Internal Army comparison material showed that nearly all basic and senior skill levels across five cyber work roles would lose compensation or remain at zero incentive pay under C-MIP. Basic cyberspace operators and exploitation analysts faced potential reductions of up to $1,000 per month, although some personnel could receive increases.
The Department of Defense created Cyber Mastery Incentive Pay under its Cybercom 2.0 initiative to replace service-specific cyber incentives. The framework combines Skill Incentive Pay for validated proficiency with Special Duty Assignment Pay for eligible advanced assignments.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcedefensescoop.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The U.S. Department of Defense is reducing its cyber workforce hiring window from 70 to 25 days to address a shortfall of nearly 20,000 cyber professionals. The new process emphasizes skills-based assessments over traditional credentials, focusing on job-specific proficiency. This initiative is also driven by the increasing use of artificial intelligence within the department.
Jun 29, 2026A DHS inspector general report found that CISA mismanaged over $100 million in cyber retention incentives, distributing funds to ineligible employees and failing to track payments. The program, intended to retain mission-critical cybersecurity talent, instead paid incentives to 240 non-cybersecurity staff and issued erroneous backpayments to over 300 employees. CISA has agreed to all eight recommendations from the OIG to address these issues.
Jun 29, 2026
Senior officials at **NIST** said significant workforce and budget reductions are forcing the agency to narrow and reprioritize work tied to national security and cybersecurity, including mandates related to **AI**, **cybersecurity**, and **post-quantum encryption**. NIST’s Information Technology Laboratory reported losing roughly **89 staff** over the past year (within a headcount of 289), amid broader agency reductions of **700+ positions**, and warned that additional congressional cuts (including a proposed **$13M** reduction to NIST’s labs program) could further constrain technical programs such as cryptographic testing and validation used for federal procurement and joint validation efforts with the Canadian Centre for Cybersecurity. On Capitol Hill, House Homeland Security Committee Democrats pressed **CISA** Acting Director **Madhu Gottumukkala** on major workforce reductions—reported as about **one-third of the agency’s employees** departing over the past 12 months—and whether the agency can sustain its mission under current funding and staffing levels. Gottumukkala defended the reductions as part of a “mission-first” effort to eliminate duplication and align work to statutory authorities, while also signaling **targeted hiring** for key roles but declining to provide lawmakers a clear vacancy count or a definitive answer on whether recently appropriated DHS funding is sufficient for CISA to execute its responsibilities.
Jun 29, 2026