Article Details
Scrape Timestamp (UTC): 2025-05-12 19:10:47.021
Source: https://www.theregister.com/2025/05/12/cisa_vulnerabilities_updates_x/
Original Article Text
Click to Toggle View
CISA mutes own website, shifts routine cyber alerts to Musk’s X, RSS, email. Cripes, we were only joking when we called Elon's social network the new state media. The US government's Cybersecurity and Infrastructure Security Agency (CISA) announced Monday that going forward, only urgent alerts tied to emerging threats or major cyber activity will appear on its website. Routine updates, guidance, and other notifications will instead be shared via email, RSS, and X. Up until now, its Cybersecurity Alerts and Advisories website has been posting a variety of bulletins, including known vulnerabilities under attack, flaws found in everything from industrial control systems to smart TVs, and warnings about specific products. Starting today, many of these updates will be distributed via email, RSS, and the social media site better known as Twitter that's owned by the President's personal billionaire éminence grease Elon Musk. CISA wants this critical information to get the attention it deserves "The focus of our Cybersecurity Alerts & Advisories webpage will now be on urgent information tied to emerging threats or major cyber activity," the org said. "CISA wants this critical information to get the attention it deserves and ensure it is easier to find." IT admins and others who want to know are advised to sign up for CISA's email notifications to stay informed. Some updates will still be available via RSS, though users tracking the Known Exploited Vulnerabilities Catalog must now subscribe to that topic through GovDelivery. X will also carry general cybersecurity updates. We've asked CISA for further comment. One has to wonder if this policy shift is linked to staff cuts at the agency, which began in March under the direction of Musk's DOGE - a Trump-blessed project to trim costs at various federal agencies that oversee the Tesla tycoon's businesses. While some CISA workers have left, more layoffs are expected, as President Trump's wish-list budget for 2026 proposes slashing CISA's funding by about 17 percent. Former agency chief Jen Easterly has publicly criticized the recommendation, and described it as harmful to America. "In a world where we are facing more serious, more complex, more dynamic threats, in a world where cyber crime damages are expected to cost the world $10.5 trillion by the end of this year, in a world where actors from the Chinese People's Liberation Army are burrowed into our most sensitive critical infrastructure, that is a real loss for America to see the capability and capacity of America's cyber defense agency being undermined," she told the RSA Conference last month. At the same time, US government bodies are increasingly moving more of their communications to Elon Musk's social network. In February, following two major aviation accidents, the National Transportation Safety Board announced it would no longer distribute updates about press conferences or investigations via email, and would instead post all such information to its X account. Then in April, the Social Security Administration began cutting staff from its communications office and told regional offices they would no longer issue press releases or "Dear Colleague" letters. Instead, agency updates will now be posted on X. "If you’re used to getting press releases and Dear Colleague letters, you might want to subscribe to the official SSA X account, so you can stay up to date with agency news," said SSA Midwest-West (MWW) Regional Commissioner Linda Kerr-Davis said at the time. "I know this probably sounds very foreign to you — it did to me as well — and not what we are used to, but we are in different times now." The SSA is still issuing some press releases on its website, such as information about the most popular baby names for 2024. (Olivia and Liam, if you're curious.) 280 characters isn't a lot of space to convey information, but maybe these agencies will get a group discount on X Premium for longer tweets. Either way, it's good news for one of Trump's more-favored billionaires.
Daily Brief Summary
The US Cybersecurity and Infrastructure Security Agency (CISA) has modified its communication channels; routine cyber alerts will not appear on its website but will be distributed via email, RSS feeds, and X (formerly Twitter).
CISA’s primary focus on its website will now be strictly on emerging threats and significant cybersecurity activities to ensure these critical updates receive appropriate attention.
The impetus for changing the update distribution channels includes making urgent information more accessible and prioritize it over routine updates.
Staff reductions at CISA started in March, influenced by budget cuts proposed in President Trump’s 2026 budget, suggesting a 17% funding reduction for CISA.
Former CISA chief Jen Easterly criticized these budget cuts, highlighting global cyber threats including those from the Chinese People's Liberation Army, and expressing concerns over decreasing the capability of America’s cyber defense.
Other US government agencies are also centralizing their updates on X, with the National Transportation Safety Board and Social Security Administration moving their communications to the platform, indicating a broader shift in how government information is disseminated.