John Felker, former head of DHS’s cyberthreat center, to retire from the department in September

Felker headed DHS's 24/7 cyberthreat watch floor and information-sharing center from 2015 to 2019.

John Felker, who helped expand the Department of Homeland Security’s cyberthreat-sharing efforts with the private sector, announced Monday that he would retire on Sept. 25 after spending five years at DHS and more than three decades in the federal government.

Felker was best known at DHS for heading the National Cybersecurity and Communications Integration Center (NCCIC), the department’s 24/7 watch floor and information-sharing hub for hacking threats, from 2015 to 2019. For the last year, Felker has led a division at the department’s Cybersecurity and Infrastructure Security Agency (CISA) that oversees the agency’s field offices across the country.

The NCCIC, which includes a vast room of monitoring screens at a DHS building in Arlington, Virginia, is one of the better known federal initiatives to warn companies of malicious cyber activity. Following the formal creation of CISA in 2018, the NCCIC was rebranded and its functions split between two divisions. Felker’s Integrated Operations Division still oversaw the watch floor.

“These past several years have been some of the most exciting, interesting and challenging for me,” Felker said in an email to colleagues. He thanked them for their “creativity and positive attitude” in helping stand up a new organization within DHS.

While head of NCCIC, Felker exhorted corporations to trade more threat data with DHS, and with each other, in a bid to protect banks, utilities and other critical infrastructure from hacking. Threat data in the corporate world “can no longer be used as a competitive advantage,” Felker said in a 2018 interview with Scoop News Group. “We’ve got to share it.”

Felker spent nearly three decades at the U.S. Coast Guard, culminating in a stint as deputy of Coast Guard Cyber Command. After working as a cybersecurity executive at Hewlett Packard Enterprise and SCI Consulting, he joined DHS in 2015, the year before Russia’s interference in the U.S. presidential campaign would jolt the department into a better understanding of critical infrastructure. Following his retirement from CISA, Felker is expected to pursue work in the private sector.

Felker’s departure follows that of Brian Harrell, who announced he was stepped down last week as a senior official focused on infrastructure security at CISA.

DHS Secretary Markwayne Mullin pinpoints optimal CISA staffing levels

He told lawmakers that he wants approximately 600 more people than it has now, which would still be well below personnel numbers prior to Trump’s second term.

Former CISA nominee Sean Plankey named US CEO of defense startup

CISA director pick Sean Plankey withdraws his nomination

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure