Senator Ron Wyden, a Democrat, is delaying the confirmation of Sean Plankey, nominated to lead the Cybersecurity and Infrastructure Security Agency (CISA), over unresolved concerns related to major security issues within U.S. telecommunications companies. Wyden accuses federal agencies of concealing crucial details about these vulnerabilities for years.
The senator, a member of the Senate Intelligence Committee, says he won’t support the nomination until an unclassified report from 2022—commissioned by CISA—is made public. The report, according to Wyden, outlines significant cybersecurity gaps within the nation’s telecom networks. Although his staff has read the report, attempts to release it publicly have been blocked.
Senate rules allow any senator to place a hold on a nomination, effectively halting the confirmation process indefinitely. Lawmakers often use this tactic to pressure the executive branch to act on specific concerns. In this case, Wyden is demanding transparency from the federal government regarding telecom security flaws.
According to Wyden, he had previously appealed to former CISA Director Jen Easterly and President Joe Biden to disclose the report’s findings before the change in administration, but no action was taken.
“This isn’t a classified intelligence document,” Wyden said. “It’s a technical report with factual information that the American public has every right to access.” He added that the information contained in the report is crucial for understanding how poor cybersecurity practices have left U.S. telecom networks vulnerable to foreign attacks.
Wyden specifically pointed to the large-scale hacking campaign carried out by a Chinese cyber-espionage group, known publicly as Salt Typhoon. These hackers reportedly infiltrated U.S. telecom networks and intercepted calls and messages from senior government officials. According to Wyden, these breaches were possible because phone companies neglected essential cybersecurity practices, and federal agencies failed to enforce basic security standards.
In response to these attacks, Wyden has introduced legislation that would compel telecom companies to implement stronger cybersecurity measures, undergo regular security testing, and face greater accountability.
“The reality is, there are still no mandatory cybersecurity standards for American telecom providers,” Wyden said. “This puts national security at risk, and it’s unacceptable.”
The White House has not responded to requests for comment regarding the senator’s decision to block Plankey’s nomination.