U.S. Cybersecurity and Infrastructure Security Agency (CISA)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) coordinates cybersecurity protection, vulnerability management and incident response across the federal government and critical infrastructure. Recent priorities include using Anthropic AI models to scan government code repositories, ordering federal agencies to patch critical vulnerabilities such as those affecting Langflow by specified deadlines, and shortening the remediation deadline for high-risk vulnerabilities to three days. CISA is also working with the G7 on guidance for AI software bills of materials. Its policies affect government agencies, software supply chains and corporate cybersecurity practices, while budget cuts and evolving AI threats also warrant continued monitoring.