A new voice for CISA
Marci McCarthy, a well-known figure in the security community, has taken a new job as Director of Public Affairs at the Cybersecurity and Infrastructure Security Agency (CISA). She brings decades of experience and a wide network to an agency whose mission is protecting America’s critical infrastructure, and whose public messaging matters more than ever.
At a glance
- Marci McCarthy appointed as Director of Public Affairs at CISA: McCarthy brings over 25 years of cybersecurity expertise to her new role.
- Key player in cybersecurity: McCarthy is the founder and CEO of T.E.N., an information security executive networking firm.
- Focus on communication: The hire signals that CISA sees clear communication as part of its security mission.
- Expanding CISA’s reach: CISA wants to reach more of the public with clear information on security issues.
Who Marci McCarthy is
McCarthy is well known in the security world. As the founder and CEO of T.E.N., an established information security executive networking firm, she has spent years connecting security leaders around the world. With over 25 years of experience, she has helped shape conversations about security problems and solutions and has mentored many people in the industry.
Why public affairs matters for CISA
The appointment shows CISA wants stronger public affairs. That matters. Explaining threats clearly to the public, partners and industry is a big part of the agency’s job, and McCarthy’s experience connecting technical experts with broader audiences should help CISA translate complex security issues into plain language people can act on.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What she is expected to do
CISA wants to expand its reach through clearer, more strategic communication. McCarthy’s job will be crafting messages that work for very different audiences, from policymakers to the general public, and promoting programs that teach good security habits.
How the appointment was received
Many in the security community welcomed the news.
McCarthy has spoken about wanting to shape public conversation on security and encourage cooperation across sectors.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What changes at CISA
McCarthy’s appointment as Director of Public Affairs opens a new chapter for CISA’s public outreach. Her experience should help the agency reach people who rarely think about security. If it works, more Americans will understand the threats they face and what to do about them.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: GitLab’s 10.0 fix, then VeloCloud attacks, a poisoned LiteLLM release and PHP2Shell logs to check
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.