Key points
- Homeland Security Secretary Kristi Noem laid out her vision for cybersecurity at the RSA Conference in San Francisco.
- She called for faster threat sharing between government and industry.
- She said CISA should get back to its core mission.
- She urged Congress to reauthorize the cyber threat information-sharing law.
Noem’s message to the security industry
Homeland Security Secretary Kristi Noem took the stage at the RSA Conference in San Francisco to set out how she wants the department to approach cybersecurity. Threats to national security and the economy keep growing. Noem’s address aimed to rally industry and government, and with attacks becoming more frequent and more sophisticated, the security professionals in the audience were listening closely to what the department’s new leadership would prioritize.
Faster sharing with the private sector
A central part of Noem’s message was closer work with the private sector. She called for faster sharing of threat information between government and companies so threats can be stopped before they escalate.
CISA’s “core mission”
Noem said the Cybersecurity and Infrastructure Security Agency (CISA) needs to return to its core mission. In her view, that means hunting threats and hardening systems, along with supporting small businesses and state and local governments and coordinating the resilience of critical infrastructure. She criticized the agency’s past work on disinformation.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Renewing the information-sharing law
Noem also urged Congress to reauthorize the Cybersecurity Information Sharing Act, the 2015 law that gives companies legal protections when they share cyber threat data with the government. The law was due to expire later in 2025. Without it, she argued, the threat-sharing she wants would be harder to sustain.
How the industry reacted
Industry leaders and security experts at the conference were watching for signs of how DHS would treat CISA under new leadership. The answer matters to every company that relies on the agency’s alerts and guidance.
What comes next
The stakes in cybersecurity keep rising. Noem’s address set out priorities for DHS and CISA, and the next test is whether Congress acts on the information-sharing law and how CISA’s work changes.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Turning that vision into results will depend on cooperation between government and industry. Global networks remain the backbone of modern infrastructure, so how well that partnership works will shape how safe it stays.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: GitLab’s 10.0 fix, then VeloCloud attacks, a poisoned LiteLLM release and PHP2Shell logs to check
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.