Congress Scrutinizes DHS Cyber Typhoon Tactics, Debates CSRB’s Role

At a glance

• Congressional Inquiry: Lawmakers are examining how the Department of Homeland Security (DHS) handled a wave of cyberattacks the post calls “Cyber Typhoon.”
• Focus on CSRB: The debate is centered on the Cyber Safety Review Board (CSRB) and whether it should continue.
• Call for Transparency: Lawmakers want clearer communication and more public accountability.

Lawmakers press DHS on the “Typhoon” attacks

Congress is looking at “Cyber Typhoon,” a series of cyberattacks on federal and critical systems, and at how the Department of Homeland Security (DHS) responded. The House Committee on Homeland Security has taken up the question of how the threats were handled and what lessons can make future defenses stronger.

Committee members argued that defenses have to keep pace with increasingly sophisticated attacks. Are current strategies strong enough?

Is the CSRB worth keeping?

The Cyber Safety Review Board (CSRB) was created to investigate major cyber incidents and advise on lessons learned. In January 2025, DHS dismissed the board’s members as part of a broad cut to advisory committees, halting its review of the Salt Typhoon intrusions into U.S. telecom networks. Some lawmakers value its oversight. Others question whether it actually improved defenses.

Lawmakers pushing for reform want defenses that are quick and informed by bodies like the CSRB.

Proposed changes for the board

Recommendations raised in the session included broadening the CSRB’s mandate, publishing more of its findings and being more transparent with the public. Stronger partnerships between government and private security firms also came up.

More openness from DHS

A major concern was communication. Many in industry, including the companies that run the networks attackers target, say they feel left in the dark about how federal cybersecurity decisions get made and what investigators have learned, and they want DHS to be more open with them.

Policy analysts argue that sharing more information with the private sector builds confidence and makes defenses stronger.

What comes next

Participants agreed that effective cybersecurity takes fast response and cooperation. DHS’s approach is likely to change.

Lawmakers and industry want an approach that combines technology, policy and international cooperation. The hearings reflect a broad view that cyber defense needs continuous oversight.

As Congress keeps working on cyber policy, the focus is on making sure the nation’s frameworks keep up, with transparency and strong partnerships at the core.

Fred Templeton, CISA, CASP, SEC+

Fred Templeton is a practicing Information Systems Auditor in the Washington DC area. Fred works as a government contractor and uses his skills in cyber security to make our country's information systems safer from cyber threats. Fred holds a master's degree in cybersecurity and is currently working on his PHD in Information Systems.