更新于:2026年3月4日 / 美国东部时间下午6:52 / CBS新闻
据知情人士透露,美国国土安全部高级顾问、特朗普提名领导网络安全和基础设施安全局(CISA)的肖恩·普兰基(Sean Plankey)于周一晚间被护送出美国海岸警卫队总部,并被撤销了门禁徽章。这位网络防御机构的提名人已离开国土安全部(DHS),但此次突然离职的具体原因尚不清楚。
普兰基是一名退役美国海岸警卫队军官,曾担任海岸警卫队国土安全部长高级顾问,在等待参议院对其领导CISA的提名进行表决期间,他一直担任该职务。CISA负责保护联邦民用网络和美国关键基础设施免受网络威胁。
海岸警卫队发言人将询问转至国土安全部。国土安全部发言人表示:”我们目前没有人员变动消息可公布。”CBS新闻也已联系CISA寻求置评。
佛罗里达州参议员里克·斯科特(Rick Scott)曾搁置了普兰基2025年的提名,去年立法会议结束时,他的提名与其他未获参议院表决的提名一同失效。特朗普总统在今年1月重新提名了普兰基,此前其提名在参议院受阻。但多位知情人士称,这次重新提名实属意外,是白宫提交的一揽子提名名单中出现行政错误的结果。
然而,白宫官员表示,普兰基的重新提名实际上是经过深思熟虑的,并再次确认他仍是领导CISA的提名人,尽管他已被调离海岸警卫队职务。该官员将其被调离海岸警卫队的问题转至国土安全部回应。
CISA内部知情人士透露,普兰基与代理主任马达胡·戈图穆卡拉(Madhu Gottumukkala)长期存在紧张关系。戈图穆卡拉几天前刚刚被替换。消息人士称,戈图穆卡拉曾在南达科他州工作,与国土安全部部长克里斯蒂·诺姆(Kristi Noem)关系密切。
据一位了解该争端的人士透露,近几个月来,两人在网络安全合同问题上存在分歧,矛盾逐渐升级。普兰基推动某些合同推进,而戈图穆卡拉则对批准这些合同感到不安。由于普兰基仍在等待参议院确认,按惯例他应避免参与机构运作,尤其是与部门合同相关的事务。
此外,该机构近几个月也面临审查:有报道称戈图穆卡拉将标有”仅供官方使用”的敏感但未分类的政府文件上传至公开版ChatGPT,触发了自动安全警报,并促使内部审查其敏感信息处理情况。
此次领导层动荡之际,CISA正经历一系列快速变动。戈图穆卡拉上月被该机构网络安全执行助理主任尼克·安德森(Nick Andersen)取代为代理主任。
普兰基还就海岸警卫队政策事务提供咨询,协助该军种在最新拨款法案中获得约250亿美元资金。
两位国土安全部高级官员告诉CBS新闻,尽管普兰基突然被解除国土安全部高级顾问职务,但他仍是CISA主任的提名人选。知情人士称,参议院日程安排和即将到来的竞选季可能阻碍其快速确认,但周二又出现了另一个障碍:诺姆在参议院作证时。
北卡罗来纳州共和党参议员汤姆·蒂利斯(Thom Tillis)威胁称,如果诺姆忽视其办公室关于移民执法行动和本州灾难应对资金的质询,他将阻挠特朗普总统的提名人选和参议院事务。
“如果我一个月内要求的答复未得到,以及其余问题……截至今日,我将告知领导层,我将搁置所有打包提名,直到我得到答复。两周内若未获回应,我将尽可能在各委员会阻止法定人数和议案审议,直到我得到答复。”参议员在听证会上表示。
与此同时,一些网络安全官员和行业专家表示,长期的领导层动荡可能削弱CISA在私营部门的地位。虽然大型关键基础设施公司越来越依赖私营情报供应商获取更快的网络威胁信息,但小型组织(包括供水公司和制造商)仍严重依赖CISA的警报和指导。
在联邦政府面临国土安全部部分停摆之际,不确定性加剧,官员们警告称,外国对手(包括伊朗关联黑客组织)针对美国基础设施的网络威胁已升级。
上周,国土安全部向执法合作伙伴发布《重大事件报告》,警告称黑客组织”网络伊斯兰抵抗组织”呼吁对美国发动网络攻击,要求动员网络战支持者。报告指出,伊朗关联行动者可能进行低级别网络行动,如网站篡改和分布式拒绝服务攻击,同时针对犹太、亲以色列或美国政府关联网站的报复性活动风险也在上升。
Trump nominee to lead nation’s cyber agency removed from post as senior DHS adviser
Updated on: March 4, 2026 / 6:52 PM EST / CBS News
Sean Plankey, the Department of Homeland Security senior adviser and Trump nominee to lead the Cybersecurity and Infrastructure Security Agency, was escorted out of the U.S. Coast Guard headquarters late Monday and had his access badge removed, according to sources familiar with the matter. The nominee to lead the cyber defense agency has left his role at DHS, though circumstances behind the sudden move remain unclear.
Plankey, a retired U.S. Coast Guard officer, formerly served as senior adviser to the homeland security secretary for the Coast Guard, a role he held while awaiting Senate action on his nomination to lead CISA, the agency responsible for protecting federal civilian networks and U.S. critical infrastructure from cyber threats.
A Coast Guard spokesperson referred inquiries to DHS. “We have no personnel matters to announce at this time,” a DHS spokesperson said. CBS News has also reached out to CISA for comment.
Florida Sen. Rick Scott placed a hold on Plankey’s 2025 nomination, and at the end of the legislative session last year, his nomination expired, along with other nominations that did not receive a Senate vote. President Trump renominated Plankey in January after his earlier nomination stalled in the Senate. But multiple people familiar with the process said the renomination was unintended and occurred as part of what one source described as an administrative error in a broader list of nominations submitted by the White House.
But a White House official said that Plankey’s renomination was, in fact, intentional and reaffirmed that Plankey is the nominee to lead CISA, despite his removal. The official referred questions about his removal from the Coast Guard position to DHS.
People familiar with internal dynamics at CISA said Plankey had longstanding tensions with Madhu Gottumukkala, who served as the agency’s acting director until he was replaced days ago. Gottumukkala previously worked in South Dakota and has close ties to Homeland Security Secretary Kristi Noem, the sources said.
Those tensions escalated in recent months during disagreements over cybersecurity contracts, according to one person briefed on the dispute. The person said Plankey pushed for certain contracts to move forward while Gottumukkala was uncomfortable approving them. Because Plankey is a nominee who’s awaiting Senate confirmation, he is generally expected to avoid involvement in agency operations, particularly those related to the department’s contracting.
The agency has also faced scrutiny in recent months after reporting revealed Gottumukkala uploaded sensitive but unclassified government documents marked “for official use only” to a public version of ChatGPT, triggering automated security alerts and prompting an internal review into the handling of sensitive information.
The leadership turmoil comes as CISA has undergone a series of rapid changes. Gottumukkala was replaced last month as acting director by Nick Andersen, the agency’s executive assistant director for cybersecurity.
Plankey has also advised on Coast Guard policy matters, working to help the service branch secure roughly $25 billion in funding for the service in the most recent appropriations bill.
Two senior homeland security officials told CBS News that Plankey remains the nominee for CISA director, despite his abrupt removal as senior DHS adviser. People familiar with the confirmation process say that Senate schedules and the upcoming campaign season may stand in the way of a speedy confirmation, but another obstacle arose Tuesday, during Noem’s testimony before the Senate.
GOP Sen. Thom Tillis of North Carolina threatened to stall President Trump’s nominees and Senate business if Noem ignored inquiries from his office regarding immigration enforcement operations and disaster response funding in his state.
“If I don’t get an answer that you’ve had a month to respond to, and the remaining ones … as of today, I’ll be informing leadership that I’m putting a hold on any en bloc nominations until I get a response, and in two weeks, if I don’t get a response, I’m going to deny quorum and markup in as many committees as I can until I get a response,” the senator said during a hearing.
Meanwhile, some cybersecurity officials and industry experts say the prolonged leadership turmoil risks undermining CISA’s standing with the private sector. While larger critical infrastructure companies increasingly rely on private intelligence vendors for faster cyber threat information, smaller organizations — including water utilities and manufacturers — still depend heavily on CISA alerts and guidance.
The uncertainty comes as the federal government faces a partial shutdown of DHS and officials warn of heightened cyber threats from foreign adversaries, including Iran-linked actors targeting U.S. infrastructure.
Last week, the Department of Homeland Security issued a Critical Incident Report to law enforcement partners warning that the hacktivist group, the Cyber Islamic Resistance has called for cyberattacks against the United States and Israel, urging mobilization of cyber warfare supporters. The report finds that Iran-aligned actors may conduct low-level cyber operations, such as website defacements and distributed denial of services attacks, amid rising tensions that has also broadened the risk of retaliatory activity targeting Jewish, pro-Israel, or U.S. government–linked sites.
发表回复