The Cybersecurity and Infrastructure Security Agency (CISA), the U.S. government's lead civilian cyber defense entity, is grappling with significant workforce and budget reductions as the White House scrambles to address emerging AI-driven cybersecurity threats. Created in 2018 to safeguard federal systems and critical infrastructure, CISA has seen its role diminish under the current administration, raising concerns about its ability to protect utilities, banks, and other vital sectors.

Since early 2025, CISA has lost nearly a third of its workforce through buyouts and budget cuts. The Trump administration's proposed budget for 2026 includes an additional $707 million reduction, potentially eliminating 766 full-time positions. These cuts come at a critical juncture as AI models like Anthropic's Mythos are expected to escalate cyberattack capabilities.

'Starving CISA of personnel, resources, and leadership in this high-stakes environment puts our homeland security and national defense at risk,' said Sen. Gary Peters (D-Mich.), ranking member on the Senate Homeland Security Committee.

Leadership Void and Operational Challenges

CISA has yet to replace its chief AI officer following her departure last year, and the agency was not granted initial access to Mythos, unlike other federal agencies. Acting Director Nick Andersen has participated in White House-led discussions about AI cyber threats but remains largely sidelined in decision-making processes. Industry sources describe CISA as 'at the table, not in the game,' awaiting clearer direction from the White House.

Former officials and industry leaders warn that CISA's diminished capacity could leave the U.S. vulnerable to AI-fueled attacks. 'Rather than preparing the roof when the skies are sunny, we're choosing to punch holes in it,' one industry source remarked. 'Now, the storm has arrived.'

Despite recent announcements of plans to hire over 300 new staffers for 'mission-critical' roles, CISA's current state raises urgent questions about the nation's readiness to defend against evolving cyber threats.