The DHS shutdown has reduced CISA to 38% capacity, shifting federal cybersecurity from prevention to reaction and raising critical questions about US cyber resilience.