IC Workforce & Organization — 2026-05-26

CISA Enters AI Era With a Third of Workforce Cut and No Permanent Director as Cyber Threats Intensify

BLUFSenate confirmation of a permanent CISA director is unlikely before December 2026, leaving critical infrastructure operators without authoritative federal AI threat translation as Mythos-class exploits proliferate.

CISA has shed roughly one-third of its workforce since January 2025 through buyouts and budget cuts, and the Trump administration has proposed a further $707 million reduction for fiscal year 2027 123. Sean Plankey withdrew his director nomination on April 22 after 13 months; Sen. Rick Scott's hold over an unrelated Coast Guard contract dispute had blocked Senate confirmation, leaving Nick Andersen as acting director 45. Axios reported, citing two sources, that CISA was excluded from Anthropic's distribution of its Mythos hacking model to more than 40 organizations, and that Andersen has had limited influence in White House-led AI threat discussions 13. CryptoBriefing separately noted that Google confirmed in May 2026 the first AI-generated zero-day exploit capable of defeating two-factor authentication 2.

Analysis
Senate confirmation of a permanent CISA director by December 2026 is unlikely. Moderate confidence rests on the absence of any replacement nomination and the administration's demonstrated tolerance for extended leadership vacuums. Axios-sourced claims that CISA was excluded from Anthropic's Mythos distribution and that Andersen holds limited White House AI influence remain uncorroborated by a second outlet, which tempers their weight. The planned 300-hire surge and a proposed vulnerability-clearinghouse role in the draft AI executive order may signal deliberate mission reorientation rather than institutional collapse. Critical infrastructure operators have no federal threat-briefing pipeline at the moment Google has confirmed the first AI-generated zero-day exploit capable of defeating two-factor authentication, accelerating migration toward commercial intelligence retainers and Five Eyes coordination as the primary early-warning sources through at least 2027.

6 sources

Trump hobbled top cyber agency just as AI learned to hack - Axios
CISA faces cuts and diminished role amid rising AI cyber threats - CryptoBriefing
Scoop: Top U.S. cyber agency doesn't have access to Anthropic's powerful hacking model - Axios
America's Cyber Defense Agency Has No Director, No Budget, and a Chinese Backdoor in Its Firewalls - State of Surveillance
CISA Is in Trouble: One-Third of Staff Gone, No Permanent Director - The Cyber Signal
Cybersecurity 2026: AI, CISA, manufacturing sector all in the hot seat - Cybersecurity Dive