Loading story…
The National Security Agency is reportedly reorganizing into five organizations focused on artificial intelligence, China, cybersecurity, combat support and global intelligence, each led by a newly elevated mission director. Former NSA Director Paul Nakasone told VulnCheck’s ThreatCon1 conference that the overhaul is “probably needed” to address evolving threats, but cautioned that its effectiveness will depend on implementation.
Nakasone warned that adversaries are moving laterally through compromised systems much faster, narrowing defenders’ response windows. He argued that security teams have a temporary opportunity to adopt AI before attackers fully exploit its offensive capabilities against critical infrastructure and sensitive organizations. Competition for technical talent, an aging national security workforce and potential government cybersecurity pay cuts could complicate recruitment and retention, undermining the agency’s ability to execute the changes.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
At VulnCheck’s ThreatCon1 conference, former NSA Director Paul Nakasone called the reported restructuring “probably necessary” but said its effectiveness would depend on implementation. He cited adversary lateral movement shrinking to an average of 29 minutes by 2025 and urged defenders to exploit a temporary opportunity to adopt AI before adversaries fully harness its offensive capabilities.
The Washington Post reported a major NSA restructuring around artificial intelligence, China, cybersecurity, combat support and global intelligence. The reported plan would place each of the five organizations under a newly elevated mission director.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The National Security Agency is undertaking its most extensive internal restructuring in at least a decade, replacing existing directorates with five mission centers focused on China, cybersecurity, artificial intelligence, combat support and global intelligence. NSA Director and U.S. Cyber Command chief Army Gen. Joshua M. Rudd reportedly announced the emerging design to senior leaders and initiated a 30-day implementation period intended to speed delivery of intelligence to operational battlefields. The agency aims to reach full operational capability by January, but key decisions remain unresolved, including the placement of Tailored Access Operations and implications for the NSA–Cyber Command relationship. Current and former officials have raised concerns that the accelerated transition could disrupt NSA operations and repeat shortcomings associated with the previous NSA21 restructuring.
Sep 15, 2026
The National Security Agency (NSA) has undergone significant leadership changes following months of instability at its highest levels. Tim Kosiba, a veteran with over three decades of federal service, has been appointed as the new deputy director of the NSA after the Trump administration removed his predecessor and other top officials, reportedly due to political pressure. Kosiba previously held key roles within the NSA, FBI, and Naval Criminal Investigative Service, and his appointment was confirmed by Defense Secretary Pete Hegseth and Director of National Intelligence Tulsi Gabbard with President Trump's approval. The agency has faced a prolonged period without a Senate-confirmed leader, contributing to uncertainty within both the NSA and U.S. Cyber Command. Simultaneously, the NSA's cybersecurity directorate is also experiencing a transition in leadership. David Imbordino, currently the directorate’s deputy chief, will serve as acting head following the retirement of Greg Smithberger, who had been leading in an interim capacity. Holly Baroody is set to return from the United Kingdom to serve as acting deputy chief. The directorate, established in 2019 to enhance intelligence sharing and collaboration with critical infrastructure, has lacked a permanent chief since early last year. These leadership changes come as the NSA continues to address evolving cyber threats, including recent advisories on malware such as BRICKSTORM, and underscores the agency’s ongoing efforts to stabilize its executive ranks and maintain operational continuity.
Jun 29, 2026
CIA Director John Ratcliffe said the agency has overhauled its technology strategy to speed adoption of artificial intelligence and other emerging tools, arguing that national security competition requires a less risk-averse approach. Speaking at the AWS Summit in Washington, D.C., Ratcliffe said the CIA will take “smart risks,” experiment, and course-correct rather than wait for risk-free deployment, while warning that frontier AI models could eventually resemble **“digital nuclear weapons”** in strategic impact. The agency has also signaled plans to introduce AI-powered “coworkers” into analysts’ workflows as part of broader operational integration. The restructuring includes elevating the Center for Cyber Intelligence into a standalone mission center and transforming the Directorate of Digital Innovation into the **Directorate of Mission Systems**, which will focus on cybersecurity, advanced data, and infrastructure services instead of offensive cyber or open-source functions. Ratcliffe said the CIA is also pursuing aggressive data modernization, cutting procurement timelines from nearly three years to about six months, completing roughly 400 acquisitions under a new framework, and creating an Office of Corporate Partnerships to streamline work with private industry.
Jun 30, 2026