CISA Acting Director Says No Uptick in Iranian Cyber Threats Despite War — Contradicting Private Sector Assessment

CISA Acting Director Nick Andersen stated the agency has not observed an increase in Iranian cyber threat activity since the war began, directly contradicting Unit 42's March 20 assessment documenting Iranian groups transitioning from espionage to destructive ICS operations. The disconnect may reflect CISA's visibility gap at 38% staffing, or a definitional disagreement about what constitutes 'uptick' versus pre-existing threat baselines. CISA continues operating under partial shutdown conditions.