Move over, Mythos: Open-source AI systems have been finding serious bugs in critical software for months.
I wrote about how a recent DARPA challenge sparked a sea change in AI's bug-finding power, and how it could especially help critical infrastructure.
cybersecuritydive.com/news/a…
Can confirm. An email to staff went out this morning. Side note: It says something about CISA's situation that one official's departure is triggering so many leadership changes because he was doing three jobs at once.
New: Steve Casapulla, an infrastructure security exec in CISA, is being detailed as the assistant national cyber director for policy in ONCD, prompting other leadership shifts in CISA, I'm told. Comes after Thomas Lind left his post heading ONCD policy
nextgov.com/people/2026/06/c…
I had been wondering when the Trump administration's AI security strategy would clash more directly with the non-DOD/IC work that CAISI is doing. Trump's Commerce Dept has already rebranded the center, and now it looks like we'll see less transparency. wsj.com/politics/policy/whit…
House Homeland Chairman @RepGarbarino just said at the Homeland Security and Defense Forum that he’s heard “there’s a nominee on the president’s desk” to lead CISA. Comes a week after DHS Secretary Mullin testified to Garbarino’s panel that a director nom would soon be announced.
"The concerns are significant because they suggest that some of the federal government’s most target-rich agencies may lack clear direction or consistent access to a tool that could help them find and fix security flaws more quickly." nextgov.com/artificial-intel…
CISA has published its binding operational directive on vulnerability prioritization, laying out new timelines for agencies to fix flaws based on a confluence of factors. cisa.gov/news-events/directi…
And CISA officials have published a blog post with an interesting statistic that is clearly meant to reassure agency CISOs about the feasibility of this directive. cisa.gov/news-events/news/pa…
I believe this is the BOD that Reuters reported (reuters.com/legal/litigation…) USG was considering in response to increasing speed of AI-powered vulnerability discovery.
New deadlines could be difficult & costly for agencies to meet. But Andersen raises good point re: prioritization.
CISA will soon release a directive pushing agencies to stop treating every cyber vuln as equally urgent, acting director Nick Andersen said. “If we try to say that everything is equally as important, then absolutely nothing’s going to be important.”
nextgov.com/cybersecurity/20…
Anthropic just released a new model, Fable 5, that shares Mythos's capabilities but has safeguards to prevent their abuse. A new version of Mythos is also available through Project Glasswing. anthropic.com/news/claude-fa…
"'I've put a couple kids in the hospital, and they have been sick, but they recovered,' McAfee acknowledged before my visit. 'But here's the thing: I’m a pioneer. And I'm going against the grain here. I'm climbing a mountain they say you can’t climb.'" propublica.org/article/mark-…
"A number of recent legal proceedings have laid bare the extent to which the Justice companies may have knowingly violated environmental laws, a key threshold for bringing a criminal matter." propublica.org/article/trump…
I wrote about the big new House AI regulation bill's cybersecurity provisions, including a reauthorization of a marquee information-sharing law: cybersecuritydive.com/news/h…
Several secretaries of state tell Bloomberg that intelligence agencies are no longer briefing them on election security threats, with one also saying that CISA has stopped conducting some security tests for states. bloomberg.com/news/newslette…
"But research has shown that more restrictive policies can diminish the potential of children who are born and raised in a country as noncitizens — and that loosening the policy can improve the prospects of the generations born with the benefit." nytimes.com/2026/06/02/busin…
The House Homeland Security Committee is holding a hearing on DHS's FY2027 budget, with DHS Secretary Markwayne Mullin and Deputy Secretary Troy Edgar testifying. homeland.house.gov/hearing/a…
In response to a question from August Pfluger, Mullin says CISA "has very unique authority" that "hasn't completely been utilized. We're going to restore that. We're putting the right people in place."
Mullin: "We've got a person soon to be nominated that will be running CISA that has the ability to recruit and focus on the authorities we have. We want CISA to be the leader of cybersecurity. They should be and they will be."