CISA: news, timeline and key numbers

The Department of Homeland Security ordered civilian federal agencies to remove DeepSeek products from their information technology systems and excluded the Chinese AI company from federal procurement. The notice was filed Monday and is due to be published in the Federal Register on Tuesday. It covers technology products and services developed by Hangzhou DeepSeek Artificial Intelligence Co., Ltd, including affiliated entities as defined in federal acquisition rules.

ProPublica reported, citing two former administration officials, that political appointees at the department asked the Cybersecurity and Infrastructure Security Agency, known as CISA, to secretly acquire a voting machine, hack it and report the findings so they could be passed to the White House. The episode points to a broader strain on the agency charged with protecting election systems.

Later, CISA confirmed that two critical flaws in PHP, known as PHP2Shell, are under active attack. PHP is said to run on about 70% of web-facing servers. Cipher, an AI agent from Causal Security, found four previously unknown vulnerabilities in EPICS Base, an open source toolkit that controls scientific facilities.

Oesnada lists every published story that names this subject. A subject gets a page once at least three stories mention it. Subjects are identified automatically from story text. Importance is an automated score from 0 to 100 assigned to each story; it is a model judgement, not a measurement. The summary above is written by a language model from Oesnada summaries only and regenerates when a new story arrives.