Congressman Swalwell Challenges Controversial Personnel Reductions at CISA Headquarters
At a glance
- Rep. Eric Swalwell demanded a briefing from CISA’s acting director before any large staff cuts at the Cybersecurity and Infrastructure Security Agency (CISA).
- Reported plans to cut CISA headquarters staff could reach nearly 40% of the workforce, according to the reports he cited.
- The cuts are part of a wider push to shrink the federal workforce, and they face pushback in Congress.
- Lawmakers and former officials question the timing, with Chinese and Russian hacking campaigns still active.
Swalwell wants answers before the cuts land
On April 10, 2025, Rep. Eric Swalwell, the top Democrat on the House Homeland Security subcommittee on cybersecurity, wrote to CISA acting director Bridget Bean. He asked for a briefing before the agency makes any major workforce or organizational changes. CISA protects federal networks and helps critical infrastructure owners defend theirs. Swalwell argues that cutting it now is reckless.
What is being cut
The Department of Homeland Security is shrinking CISA as part of the administration’s broader effort to reduce the federal workforce. Reports at the time described plans that could affect nearly 40% of staff, including teams that hunt threats and manage vulnerabilities. DHS Secretary Kristi Noem had also emailed employees encouraging them to take offers to leave.
Swalwell’s letter says cutting staff while attacks on U.S. networks keep rising is dangerous. He wants to know which functions would be cut, and how CISA would keep doing its job with fewer people.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Why critics object
Supporters of the cuts say the agency has grown beyond its core mission. Critics, including former officials, say the timing is bad. CISA is still dealing with Chinese state hackers inside telecom and infrastructure networks.
People who work with the agency point out that cyber defense depends on people: analysts to read the data, specialists to help patch systems, and responders who show up when an incident hits. Losing them can’t be undone quickly.
What fewer staff would cost
The effects could reach beyond CISA. A single successful attack on a hospital chain or pipeline can cost far more than the payroll savings from a round of cuts. CISA also coordinates much of the federal government’s work with states, local governments and private companies, and that coordination runs on people.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What to watch next
The fight over CISA’s staffing will run through the budget process. Swalwell’s letter asks for answers before the cuts take effect. Whether the agency provides them, and how deep the cuts go, will show how much capacity CISA keeps for the next major incident.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.