There’s a lame-duck session before Dems take over, but the leaders of the homeland security panels are already teeing up their agendas.

The Department of Peace group shared it with Swiss hacker/journalist maia arson crimew and DDoSecrets put it online.

At risk, the Oregon Democrat warned, are online crime tipsters, whistleblowers and others.

Government auditors say federal agencies haven’t met mandated security steps for operational technology, which hackers targeted in water sector attacks this summer.

The DHS inspector general said CISA lacks the power to compel agencies to implement its Binding Operational Directives.

After the exit of around 1,000 CISA workers, legislation from three top House Democrats orders a force structure assessment like that more common to military branches.

Three feds spoke about future plans for the Continuous Diagnostics and Mitigation program, and lessons they’ve learned.

Agency red-teamers got initial access to both organizations they tested, but one quickly isolated and shut down the attempts from going further.

One expert said they were pleased by the guidance, which touches on open-weight AI models, patching and more.

A vulnerability that meets all four criteria would need to be fixed within three days, for instance.