The people who protect America from foreign hackers say they are now facing a new kind of threat—one coming from inside their own government. Workers at the Cybersecurity and Infrastructure Security Agency (CISA) are reeling after former President Donald Trump ordered an investigation into their ex-boss, Chris Krebs. Krebs had served as the agency’s first director and was fired shortly after publicly pushing back against Trump’s false claims about the 2020 election.
Trump’s new executive order doesn’t just target Krebs. It also suspends the security clearances of employees at SentinelOne, the cybersecurity company where Krebs now works. Many in the cybersecurity community see this as a personal attack, not a move made for national security.
Five current CISA employees, who spoke to NBC News on condition of anonymity, say morale has collapsed. “It’s a really tough time for all of us right now,” one said. “Every day feels somehow more bizarre than the last. It is incredibly difficult to focus on our mission.”
Krebs had become a widely respected leader during his time at CISA, helping build it into the nation’s frontline defense against digital threats. But his refusal to support Trump’s election fraud claims made him a political target. After declaring that the 2020 election was “the most secure in American history,” Trump fired him—and now, years later, he’s being investigated by the Department of Justice, per Trump’s order.
Musk’s Crisis Deepens: Tesla Owners’ Data Held Hostage in Sinister Cyber Plot
Downsizing and Fear of Retaliation
Alongside the investigation into Krebs, the White House has continued to shrink CISA’s staff. This is the third time in just three months that CISA employees have received buyout offers or been encouraged to retire early. These cuts come at a time when the agency is already struggling to keep up with growing threats from cybercriminals and foreign governments.
Emails reviewed by NBC News show that the Department of Homeland Security (DHS), CISA’s parent agency, sent a memo on a Monday evening offering early retirement or buyouts. A second email came from CISA’s acting director, Bridget Bean, reinforcing that offer. The agency is also being led by a Trump-nominated candidate, Sean Plankey, who has yet to be confirmed by the Senate.
Many inside the agency feel that the ongoing staff reductions are harming national security. One employee said, “The cuts that happened initially have already severely degraded our capacity to defend critical infrastructure. The cuts that may come—whatever the numbers—will without a doubt further degrade our ability to defend critical infrastructure.”
In a post on LinkedIn, Jen Easterly, who succeeded Krebs as CISA director under President Biden, criticized the move. She wrote that laying off experienced cybersecurity professionals and removing key leaders will only make the country more vulnerable.
Cyber Crackdown: U.S. Takes Action Against Chinese Hackers
Experts Warn of Chilling Effect
Trump’s executive order doesn’t just remove people—it sends a message that’s being felt far beyond CISA. By targeting SentinelOne and revoking the clearances of Krebs and his colleagues, some CISA staff say it creates a “chilling effect.” They worry that speaking out, even on matters of public safety, could now risk their careers.
“Will there be pressure to not have a public vulnerability in a car company if the CEO is close to the president?” one CISA employee asked. “It’s like Iraq war intelligence. We’re only going to say what they want to be the message, rather than telling the country about real threat.”
The fear is that politics is starting to shape what cybersecurity experts can and cannot say, even if it means leaving the public in the dark about real dangers. And with CISA continuing to face threats from nations like China and criminal ransomware groups that have already disrupted hospitals and schools, many inside the agency believe this is the worst time for political interference.
As for Chris Krebs, he has not given any official statements about the investigation. But after news of the executive order broke, he reposted his message from the day he was fired in 2020:
“Honored to serve. We did it right. Defend Today, Secure Tomorrow. #Protect2020.”
