CISA's cyber-protection teams can only do so much without enhanced threat-hunting authority — and with a vacancy in leadership looming large, lawmakers said.
Only three agencies have reported breaches, but 32 are known to have used the software at some point since 2006. And contract records aren't the most accurate.