House committee dings DHS's cyber intelligence for fusion centers

Fusion centers aren't getting information from NPPD, are caught dealing with over-classified info, and struggle to find people with clearances who can access the information they do get.

Fewer than one-in-four Homeland Security fusion centers across the country receive cyberthreat reporting or other intelligence products from DHS’ National Protection and Programs Directorate, hampering their nascent efforts to help defend the country against online attacks, a congressional report said Tuesday.

Those efforts are further hampered because fusion center representatives do not sit on the floor of NPPD’s 24 hour watch center, the National Cybersecurity and Communications Integration Center (NCCIC), the majority staff of the House Homeland Security Committee found.

The report includes material from dozens of interviews and a long survey completed by 68 major fusion centers across the country. The centers were set up to integrate state and local law enforcement agencies into DHS’ homeland protection mission by providing them with threat warnings they could use to inform their local priorities and by vacuuming up local intelligence reporting in the hope that it could cast light on national trends or geographically dispersed terrorist plotting.

“Significantly, only 16 out of 68 survey respondents reported they receive NPPD cyber-related products,” reads the report, “Given current cyber threats and fusion centers’ nascent efforts to develop cybersecurity capabilities, the committee believes DHS should ensure these products are made accessible to fusion center personnel, when appropriate.”

One problem with the NPPD intelligence: It’s too highly classified. “A significant amount of cyberthreat information is classified at the Top Secret level, which has prevented some fusion centers from conducting analysis on this issue” because they lack the special facilities required to receive and store top secret information, states the report.

Even the half of all fusion centers which do have a special room, known as a SCIF, to receive and store classified reporting,  cannot share it with the state and local law enforcement agencies they’re supposed to work with due to a lack of clearances for state-level employees.

“Their ability to share it with their state and local partners is restricted because there are a limited number of products at the Sensitive but Unclassified (SBU) level,” reads the report.

DHS leadership “should proactively work with the NCCIC to develop a process for sharing cyber threat information with fusion centers at the unclassified level,” the report recommends.

House intel bill includes provisions on state and local threat intelligence, election security, AI

The House Intelligence Committee advanced its fiscal 2027 authorization legislation Monday.

DHS Secretary Markwayne Mullin pinpoints optimal CISA staffing levels

House panel poised to hold hearing centered on AI impact on cyber

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure