CISA Denies Reports That It Has Halted Cyber Operations Against Russian Threats

The Cybersecurity and Infrastructure Security Agency (CISA) has refuted claims that it is scaling back its efforts to counter Russian cyber threats, calling the reports “fake” and a danger to national security.

The agency’s statement comes in response to an article published by The Guardian, as well as other media, which suggested that the Trump administration was deprioritizing Russia as a cybersecurity threat.

CISA, which operates under the Department of Homeland Security (DHS), issued a firm response on X (formerly Twitter), stating:

“CISA’s mission is to defend against all cyber threats to U.S. Critical Infrastructure, including from Russia. There has been no change in our posture. Any reporting to the contrary is fake and undermines our national security.”

The Guardian article, authored by Washington correspondent Stephanie Kirchgaessner, alleged that the Trump administration had significantly altered its stance on Russian cyber threats. The report highlighted two key developments:

1. A recent United Nations speech by Liesyl Franz, Deputy Assistant Secretary for International Cybersecurity at the State Department, in which she omitted any mention of Russian cyber activity while naming China and Iran.
2. An internal CISA memo allegedly instructing analysts to stop tracking Russian cyber threats. According to an anonymous source quoted by The Guardian, CISA personnel were verbally informed that Russia-related investigations were no longer a priority.

CISA shaken up

The latest controversy comes amid broader changes in the U.S. government’s cybersecurity landscape under President Trump’s second administration. Recently, the DHS dissolved its Cyber Safety Review Board, a key advisory body investigating major cyber incidents, including a large-scale Chinese telecom hack. Additionally, at least 130 cybersecurity personnel were reportedly dismissed from CISA, including those working on election security and foreign disinformation campaigns.

CISA plays a crucial role in protecting U.S. critical infrastructure, monitoring cyber threats from state-sponsored actors, and coordinating national cybersecurity policy. The agency has previously been at the forefront of efforts to counter Russian cyberattacks, including threats from groups linked to the Russian government, such as Sandworm and Fancy Bear. Given CISA’s crucial responsibilities, the recent media reports raised concerns that the agency’s ability to track Russian threats was being curtailed for political reasons.

While CISA’s public statement attempts to reassure the cybersecurity community that its mission remains unchanged, some remain skeptical. The Trump administration has faced criticism for weakening federal cybersecurity measures, including shifting enforcement priorities at regulatory agencies, reducing cybersecurity personnel, and aligning with Moscow on the global stage, so the results of any changes made to the agency’s structure and operations are to be seen in the upcoming period.