Loading story…
A new bill has been introduced in the U.S. House of Representatives that seeks to establish government-wide processes for attributing and sanctioning foreign hackers responsible for major cyberattacks against the United States. The proposed legislation, known as the Cyber Deterrence and Response Act, would empower the executive branch to formally designate certain foreign entities as 'critical cyber threat actors' and impose a range of sanctions, including asset blocking, financial restrictions, export controls, procurement prohibitions, visa bans, and suspension of assistance. The bill also outlines a framework for attribution, leveraging input from federal cyber agencies and private threat intelligence firms, and is intended to strengthen the government's ability to hold malicious actors accountable and protect critical infrastructure.
The legislative push comes amid growing concern in Congress over the increasing sophistication and frequency of cyberattacks targeting U.S. interests, as well as perceived gaps in the nation's ability to deter such threats. The move follows high-profile incidents such as the Salt Typhoon cyberespionage campaign and reflects a broader effort to enhance national cyber defense and response capabilities. Congressional leaders and the Trump administration have emphasized the need for real-time detection and deterrence, with the new bill positioned as a key component of the administration's evolving cyber strategy.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Rep. August Pfluger reintroduced the Cyber Deterrence and Response Act in the House. The bill would create a formal U.S. process to attribute major cyberattacks, designate responsible foreign parties as 'critical cyber threat actors,' and trigger sanctions against them.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcenextgov.com
Open sourcecyberscoop.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
US lawmakers and expert witnesses used a House Homeland Security hearing to debate whether the United States should **expand offensive cyber operations** in response to **China-linked intrusions** into US critical infrastructure and telecom networks, including reported access to “lawful intercept” systems used for court-authorized surveillance. Witnesses argued for embedding offensive cyber thinking across government and integrating cyber more deeply into military doctrine, while also pointing to an emerging national cyber strategy expected to include an offensive-operations pillar and greater public-private collaboration. Several participants cautioned that expanding cyber offense without strengthening domestic resilience could increase escalation risk and leave US networks exposed, citing concerns such as **CISA’s reported loss of roughly one-third of its workforce** and the need to fund defensive modernization of federal systems. Separately published commentary about “gray zone” cyber disruption tied to Venezuela reflects the broader policy narrative around cyber-enabled coercion, but it does not add substantiated technical details about the hearing’s core issue or the China-linked intrusions driving the push for a more aggressive posture.
Jun 29, 2026
The White House issued a presidential memorandum creating a federally supervised program that allows vetted U.S. private companies to support cyber operations against foreign cyber-enabled transnational criminal organizations. The framework will be managed by the National Coordination Center and jointly overseen by officials designated by the Department of Justice and Department of Homeland Security, with participating firms required to contract with DOJ or DHS, disclose relevant commercial ties, and potentially post a **$1 million bond or escrow**. The memorandum authorizes both **cyber surveillance** for covert intelligence collection and **cyber effects operations** to disrupt, degrade, or destroy criminal infrastructure, but limits activity to non-state criminal groups and requires written government approval, legal review, and multi-agency deconfliction before missions proceed. It also bars operations likely to cause death, serious injury, use of force, or an armed attack under international law, and requires immediate halt-and-report procedures if a U.S. person or domestic system is accidentally affected; agencies were directed to establish operating procedures within 60 days and provide follow-on reporting within 180 days and annually thereafter.
Aug 16, 2026
The U.S. government is preparing to release a new National Cyber Strategy aimed at deterring foreign cyber adversaries and strengthening public-private collaboration. National Cyber Director Sean Cairncross announced at the Aspen Cyber Summit that the strategy will be concise, actionable, and structured around six pillars, including shaping adversary behavior and enhancing industry partnerships. The strategy intends to move beyond traditional defensive measures by introducing clear costs and consequences for malicious cyber activity targeting U.S. critical infrastructure, reflecting a shift toward a more offensive and coordinated national approach. Officials highlighted that the new strategy will differ from previous versions by focusing on rapid implementation of action items and deliverables, rather than lengthy policy documents. The approach seeks to address the fragmented nature of current U.S. cyber responses by establishing a unified, government-wide framework. The strategy is currently under review by federal agencies, with input from the FBI and private sector leaders, and is expected to be released soon. The administration aims to modernize federal cyber capabilities, accelerate technology adoption, and send a strong deterrent signal to both nation-state and criminal cyber actors.
Jul 12, 2026