This article is cause for concern:
The great work of CISA is likely to be adversely affected:
(PS I have not used the politicised title used in the article)
Indeed it is. The CSRB has been doing good work. What few reports they did get to finish can be found at Cyber Safety Review Board (CSRB) | CISA. Being heavily invested in the Java world, I only read the log4j report in detail, but the Exchange and Lapsus$ reports should make for very interesting reading as well.