The Cybersecurity and Infrastructure Security Agency has released its 2025 Year in Review, touting gains in both cyber and physical security and framing the past year as one of stepped-up operational tempo and closer coordination with government and industry partners.
“The Year in Review is more than a report – it’s proof of CISA’s unwavering commitment to protecting the infrastructure and systems Americans count on every day,” said CISA Acting Director Madhu Gottumukkala. “From safeguarding federal networks to equipping communities with tools to reduce risk, our team delivered measurable results in 2025. And we’re not slowing down – we will lead with innovation, resilience and partnership to stay ahead of tomorrow’s threats.”
The annual report highlights a series of activity metrics CISA says illustrate progress on “collective defense” and modernization efforts aligned with administration policy priorities. According to the agency, its 24/7 Operations Center published more than 1,600 advisories and other products and handled over 30,000 incidents in 2025. CISA also reports it blocked 2.62 billion malicious connections on federal civilian networks and 371 million across critical infrastructure environments.
To bolster readiness, the agency says it conducted 148 cyber and physical security exercises involving more than 10,000 participants nationwide. Following Executive Order 14305 on airspace sovereignty, CISA also issued the Be Air Aware™ suite of guides aimed at helping organizations detect, respond to, and safely manage threats from unmanned aircraft systems.
CISA positions the figures as evidence of faster threat response, operational modernization, and expanded partnership with state, local, and private-sector stakeholders, while emphasizing stewardship of taxpayer resources. The report frames the 2025 achievements as a springboard for the agency’s 2026 agenda, which will continue to prioritize resilience across critical infrastructure sectors amid an evolving threat landscape.






