CISA Shutdown Sidelines US Cyber Defense, NPM Attack Targets Claude Code and VS Code

Posted 2 hours ago by

PWN

TLDR: CISA has been pushed into standby mode after funding ran out, pausing core US cyber defense work. A malicious npm supply chain attack hit developers using Claude Code and VS Code, stealing credentials and tokens. Google signed a Pentagon deal letting the DoD use its AI for classified work, drawing internal employee backlash.