Loading story…
The U.S. Department of Defense is reducing its cyber workforce hiring window from 70 to 25 days to address a shortfall of nearly 20,000 cyber professionals. The new process emphasizes skills-based assessments over traditional credentials, focusing on job-specific proficiency. This initiative is also driven by the increasing use of artificial intelligence within the department.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
The Pentagon barred technology vendors from using personnel based in China after a ProPublica investigation raised concerns about such staffing arrangements. The policy action was reported on September 22, 2025.
A Pentagon official advocated speeding up the hiring of cybersecurity personnel to strengthen the department’s cyber workforce. The reference indicates this was a notable policy push reported on September 22, 2025, but provides no more specific event date.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The cybersecurity industry is grappling with a persistent skills gap, prompting discussions about the need for more generalists, the value of diverse backgrounds such as military veterans, and the current landscape of job opportunities. Industry voices highlight concerns that over-specialization and a focus on tool management have led to inefficiencies, while advances in AI and better design could help refocus efforts on solving core security problems. At the same time, the sector is actively seeking talent for a wide range of roles, from threat intelligence analysts to CISOs and data protection engineers, reflecting the breadth of skills required to secure modern organizations. Military veterans are increasingly recognized as a vital talent pool for cybersecurity, with their discipline, leadership, and mission-critical mindset translating well to cyber defense roles. The field is open to veterans from all specialties, not just those with technical backgrounds, and organizations are leveraging their unique skills to strengthen security operations. The ongoing demand for cybersecurity professionals, combined with calls for broader skill sets and the integration of non-traditional candidates, underscores the industry's urgent need to address workforce challenges and adapt to evolving threats.
Jun 30, 2026
The Pentagon’s Cyber Mastery Incentive Pay (C-MIP) program, scheduled to launch October 1 as part of the Cybercom 2.0 force-generation overhaul, is facing criticism over projected pay cuts and uneven implementation. The program replaces disparate service-level cyber incentives with two components: Skill Incentive Pay for validated proficiency and Special Duty Assignment Pay for certain advanced-duty assignments. Internal Army comparisons indicate that many basic and senior personnel could receive less than under the legacy Cyber Assignment Incentive Pay program, with projected monthly reductions of $100 to $1,000 and some basic cyberspace operators and exploitation analysts facing the largest cuts. The Army introduced one-year temporary rate protection to cushion reductions, while the Air Force was still finalizing its rollout shortly before launch and Navy implementation details remained in progress. Unclear communication, unfinished service-level plans and strict qualification-currency requirements have added to personnel uncertainty. Officials and experts warned that compensation disruptions could weaken morale and retention in the military cyber workforce as it confronts evolving threats and technological advances, including artificial intelligence.
Oct 2, 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is facing a significant staffing crisis following substantial personnel reductions attributed to Trump-era cuts and a prolonged government shutdown. Acting CISA Director Madhu Gottumukkala acknowledged in an internal memo that these reductions have hampered the agency's ability to fully support national security imperatives, with nearly one-third of the workforce lost in the past year. The memo outlines an urgent need to hire highly qualified professionals by the end of fiscal year 2026 to restore and strengthen CISA's defensive posture, leveraging the Department of Homeland Security's Cyber Talent Management System to attract critical cyber talent at market rates. In response to mounting cyber threats, particularly from China, CISA is accelerating recruitment, workforce development, and retention initiatives. The agency plans to focus on hiring state cybersecurity coordinators, regional cybersecurity advisors, and making itself more attractive to both industry experts and junior practitioners. Additional measures include expanded collaboration with colleges and universities, reviving internship programs, and considering return-to-office exemptions for certain employees. These efforts are intended to ensure CISA's mission readiness and operational continuity amid increasing cyber risks and resource constraints.
Jun 30, 2026