Cybersecurity and Infrastructure Security Agency

This week, we swore in Kan Wang as our new Chief Financial Officer and Khoi Nguyen as our new Chief Acquisition Executive. Wang brings over 18 years of federal leadership experience spanning budgeting, program analysis, strategic planning and national security. Prior to joining CISA, he served in a series of roles across the Executive Office of the President and major federal agencies, providing him with a broad perspective on resource management. A retired Army veteran, Nguyen has more than 20 years combined leadership and experience. He has served in multiple positions over his career, including his most recent as the Command Acquisition Executive and Director for the Cyber Acquisition and Technology Directorate for U.S. Cyber Command. Their experience and knowledge will be instrumental in advancing the mission to secure our nation’s critical systems and functions. Join us in welcoming them to the team! Learn more about Kan Wang: https://lnkd.in/gPEn_edF Learn more about Khoi Nguyen: https://lnkd.in/gdzE4Cdt

Question of the week: What strategies are you using to build a security-first culture for the next 250 years? How are you preparing for system disruptions? #CybersecurityAwarenessMonth #SecuringTheNext250

Early career professionals at CISA work on real challenges that shape national security. Through internships and hiring pathways, students gain technical experience, learn risk advisory acumen, and contribute to innovative solutions that protect our critical infrastructure. Explore opportunities to start your federal cyber or infrastructure security career: https://go.dhs.gov/5bY

Today, we released CISA 2030: Defend, Harden, Prevail, a roadmap to protect the nation’s critical infrastructure and lead national cyber defense. America’s critical infrastructure is essential to our national security, economic strength, public safety, and way of life. As cyber, physical, and geopolitical threats become increasingly complex and interconnected, CISA is focusing its people, partnerships, and capabilities where they will have the greatest impact. The CISA Strategy advances three strategic pillars: 🛡️ Lead National Cyber Defense 🛡️ Prioritize National Infrastructure Security 🛡️ Mobilize National Resilience Through these pillars, CISA will work alongside government, industry, state, local, tribal, and territorial partners to strengthen collective defense, harden the nation’s most critical infrastructure, and build resilience against evolving threats. View the strategy: cisa.gov/CISA2030

Clean drinking water, dependable electricity, reliable transit, and local hospitals: these are some of the lifelines our communities rely on every single day. Protecting them requires keeping both our physical facilities and our digital systems secure against disruption. Join us for a special edition of CISA Live! on October 26: "Preparing for Disruption: Building Critical Infrastructure Resilience in an Era of Accelerating Threats." Hear directly from CISA leadership on how frontline defenders can plan for resilience during disruption of essential services, what near-term steps facilities should take, and how your organization can participate in no-cost safety and security assessments. 📅 Monday, October 26, 2026 💻Register here: https://lnkd.in/gznanJKR

ICYMI: Dive in to our weekly recap: cisa.gov

Back up your data using the 3-2-1 rule. Recovery is faster and less stressful with a backup plan in place. Protect your legacy and the next 250 years: https://lnkd.in/etEDBUak #CybersecurityAwarenessMonth

We’ve updated our PHP2Shell Alert, incorporating partner resources and a SIGMA rule to help identify potentially suspicious activity. Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. If your organization cannot update immediately or continues to use unsupported PHP 8.1 or earlier versions, take affected PHP-based systems offline until they can be patched or updated. http://go.dhs.gov/5Hi

This week, we welcomed our newest group of employees to help us secure the systems America depends on. New positions are frequently being added to USAJobs. Don’t wait; apply now: https://lnkd.in/eHbp9BTC

What does the future of cybersecurity look like? At the ASIS International Asia Pacific Conference, CISA’s Chief Operating Officer Ryan Donaghy delivered keynote remarks exploring the opportunities, risks, and security implications of Super Intelligence and post-quantum computing. As emerging technologies continue to transform the threat landscape, organizations must begin preparing now for the cybersecurity challenges of the future. From cryptographic modernization to long-term resilience planning, the conversation underscored the importance of proactive action today. Learn more about post-quantum cybersecurity: https://lnkd.in/ghU2nCsX