Sep 4, 2026 · 35 min
CISA cuts tests as cyber threats outpace old defenses
The Department of Know: Astra launches, CISA cuts programs, McKesson breached
The discussion tests whether governments, companies, and security researchers can share responsibility as critical systems and attack methods grow more complex.
- 1Commercial VPNs offer privacy but limited protection against sophisticated nation-state threats targeting organizations.
- 2AI can accelerate vulnerability research, but skilled researchers and basic security hygiene remain indispensable.
- 3CISA’s reduced assessment programs sharpen questions about sustainable public-private support for critical infrastructure security.
Don't miss
The panel’s comparison of court records, patient data, and identity documents turns a familiar breach question into a debate over lasting harm and exploitability.
The brief
Jonathan Waldrop and Montez Fitzpatrick join the Department of Know panel to examine where familiar cybersecurity tools stop helping against sophisticated threats.
Commercial VPNs may shield privacy, but the discussion separates that benefit from organizational security and questions their value against nation-state actors.
The UK’s proposed power to restrict high-risk technology vendors exposes the cost of replacing embedded operational technology after risks become politically urgent.
Bug bounties and AI-assisted exploit research are changing the security workflow: access and legal protection matter, but neither programs nor models replace expertise.
CISA’s scaled-back assessments and a Texas private-sector pilot frame the episode’s central tension: critical infrastructure needs durable support, not just promising experiments.
The closing breach comparison weighs court records, patient data, and identity documents, asking which exposure creates the most lasting harm and social-engineering risk.