How Trump Left America Vulnerable to Cyberattacks

D uring her January 2025 confirmation hearing to be secretary of homeland security, Kristi Noem was asked how she would strengthen the nation’s cyberdefenses.

Noem told senators that she would make the department’s Cybersecurity and Infrastructure Security Agency “smaller” and “more nimble.” President Trump had created CISA as a stand-alone agency within the Department of Homeland Security during his first term to give cybersecurity more institutional heft, and it had grown quickly with support from lawmakers of both parties.

But after CISA declared the 2020 presidential election to be “the most secure in American history” and the agency’s director, Christopher Krebs, refused to back Trump’s claims that the vote had been stolen, Krebs became a target for the president’s fury and a seething grudge..

During the DOGE fever of the first few months of Trump’s return, CISA’s budget was reduced and its staff cut by one-third.

The agency hasn’t had a permanent, Senate-confirmed director since Trump retook office.

In April, the White House proposed deeper cuts to CISA’s budget, but Republican lawmakers have raised concerns that critical U.S. infrastructure is already too vulnerable.

In June, Noem’s replacement, Markwayne Mullin , reversed course.

He told lawmakers during a DHS budget hearing that he wants to add 600 positions at CISA.

The agency has scheduled new hiring expos, and Acting Director Nicholas Andersen says that he’s “ruthlessly prioritizing” critical cyberdefense roles.

But the United States is now nearly six months into a war with Iran, an aggressive and capable cyber foe—and preparations for the midterm elections are under way, with far less intelligence from CISA about foreign and domestic threats.

Hackers with suspected ties to Iran targeted U.S. water and wastewater systems late last month in more than a dozen states.

In Braham, Minnesota, the attacks temporarily shut down the water system.

The town was one of more than 30 systems that were targeted, state officials said, describing the attacks as the most extensive they’ve seen.

The Trump administration has not confirmed Iran’s purported role in the water-system hacks or said how many states or utility systems have been affected—or whether there have been other breaches.