The Register: CISA: We didn’t fire our red team, we just unhired a bunch of them

Mar 13, 2025

—

Source URL: https://www.theregister.com/2025/03/13/cisa_red_team_layoffs/
Source: The Register
Title: CISA: We didn’t fire our red team, we just unhired a bunch of them

Feedly Summary: Agency tries to save face as it also pulls essential funding for election security initiatives
The US cybersecurity agency is trying to save face by seeking to clear up what it’s calling “inaccurate reporting" after a former senior pentester claimed it laid off the entire Red Team.…

AI Summary and Description: Yes

Summary: The text discusses recent layoffs and contract terminations impacting the Cybersecurity and Infrastructure Security Agency (CISA), particularly focusing on its Red Team, which is responsible for ethical hacking to improve cybersecurity. The agency clarified that it has not laid off its Red Team but terminated certain contracts for efficiency. This situation raises significant concerns about cybersecurity and election security, especially with cuts affecting crucial information sharing and analysis centers.

Detailed Description:

The provided text brings to light various significant issues within the cybersecurity infrastructure of the United States, particularly regarding the CISA and its Red Team. Here are the key points and their implications for cybersecurity professionals:

– **CISA’s Response to Layoff Claims:**
– CISA refuted claims made by former employee Christopher Chenoweth that the entire Red Team was laid off.
– They clarified that while contracts were terminated, this was part of a regular review process to ensure effective resource allocation.
– CISA emphasized that the capabilities of the Red Team remain intact and they continue to engage with organizations to enhance critical infrastructure defenses.

– **Importance of Red Teams:**
– Red Teams, composed of ethical hackers, simulate cyberattacks to identify vulnerabilities and fortify organizational defenses.
– While often conflated with penetration testing, red teaming provides a broader perspective on potential attack vectors and overall system defenses.
– The operational continuity of CISA’s Red Team is vital as it aids organizations in improving their cyber resilience and response capabilities.

– **Impact of Contract Terminations:**
– The article notes a significant number of contract terminations (95 total at DHS) affecting key information sharing and analysis centers (ISACs), like the Elections Infrastructure ISAC (EI-ISAC) and the Multi-State ISAC (MS-ISAC).
– These centers play crucial roles in advising election officials and sharing cybersecurity threat information critical for election integrity.
– The cessation of funding for these ISACs poses a significant risk, particularly amid rising cybersecurity threats from nation-state actors, leaving local entities vulnerable.

– **Community Reaction:**
– The security community expressed concern over the budget cuts, fearing the implications for election security and the rising risks associated with cybersecurity threats.
– Experts argue that the loss of federal support for cybersecurity could endanger communities, highlighting the reliance of state and local agencies on ISACs for defense against potential cyberattacks.

The text provides crucial insight into the shifting landscape of cybersecurity, emphasizing the need for continued support and resources for ethical hacking teams and information-sharing initiatives, particularly in safeguarding critical infrastructure and electoral processes. Cybersecurity and compliance professionals should closely monitor these developments, as they could directly affect threat response capabilities and overall cyber resilience strategies in their organizations.

1 2 3 5 a Act after AI analysis and art as attack attack vector attack vectors attacks Budget Cuts by C capabilities CERN CIA CISA CleaR community compliance compliance professionals concerns contract contracts critical critical infrastructure cyber cyber resilience cyberattack Cyberattacks cybersecurit Cybersecurity Cybersecurity and Infrastructure Security Agency Cybersecurity and Infrastructure Security Agency (CISA) cybersecurity infrastructure Cybersecurity Professionals cybersecurity threat cybersecurity threats D de defense defenses development DHS e effective efficiency election election integrity election security elections electoral processes end ethical ethical hacking exp expert Experts face for funding g Gen GIS gs H hack hacker hackers hacking high Highlight hire HR http HTTPS implications in information information sharing infrastructure infrastructure security integrity ISAC ite J Just k Key l land layoffs led Li local Monitor multi N nation nation-state actors no notes o of off offs on operation operational continuity OPM organization organizations out over penetration testing play point porting potential pre process processes professionals R rate RCE react red red team red teaming Red Teams report reporting resilience resilience strategies resource resource allocation resources response response capabilities responsible Risk risks Ro Role s safe sec security security and compliance security community security infrastructure security professionals security threat security threats SHA sharing Sig Sim SoC source SSE state state actors system T teaming Teams test Testing text the threat threat response threats to Tor TP trie UI United States up US V vectors vulnerabilities Wi x