Loading story…
President Donald Trump signed the 2026 National Defense Authorization Act (NDAA), which includes significant cybersecurity provisions aimed at strengthening the Department of Defense's digital defenses. The bill allocates over $400 million to U.S. Cyber Command for digital operations, maintenance, and other activities, and mandates that senior Pentagon leaders be issued mobile phones with enhanced cybersecurity protections such as data encryption. The legislation also calls for expanded AI-focused cybersecurity training and improved mental health services for cyber personnel, reflecting a comprehensive approach to national cyber-defense readiness.
These measures are designed to address evolving cyber threats and ensure that both technology and personnel are better equipped to defend against sophisticated attacks. The focus on secure mobile communications and increased funding for Cyber Command highlights the government's recognition of mobile device vulnerabilities and the need for robust operational capabilities. The NDAA's bipartisan support underscores the urgency of these upgrades in the face of persistent cyber risks targeting U.S. defense infrastructure.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
The enacted defense bill added measures to expand AI-focused cybersecurity training and provide mental-health services for cyber forces. These provisions were framed as reforms to strengthen both the technical and human dimensions of U.S. cyber-defense readiness.
President Donald Trump signed the 2026 National Defense Authorization Act into law, establishing new cybersecurity requirements for U.S. defense operations. The law includes funding for U.S. Cyber Command and mandates enhanced security protections, including encryption, for mobile phones issued to senior Defense Department leaders.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The 2026 National Defense Authorization Act (NDAA) introduces significant new cybersecurity requirements for the U.S. Department of Defense (DoD), including a 4.1% increase in military cyber funding, bringing the total cyber activities budget to approximately $15.1 billion. The legislation emphasizes the protection of mobile communications for senior officials, the development of AI security frameworks, and the expansion of the DoD cyber workforce, with $9.1 billion allocated specifically to cybersecurity and $611.9 million dedicated to cyber research and modernization efforts. A key provision of the NDAA mandates that, within 90 days of enactment, all wireless mobile phones and related telecom services provided to DoD personnel involved in sensitive national security functions must be acquired under contracts that require enhanced cybersecurity protections. These protections include mandatory encryption of data and communications, obfuscation of persistent device identifiers to prevent tracking, and continuous monitoring capabilities for mobile devices. These measures are designed to address evolving threats to national security and ensure robust protection of critical DoD communications infrastructure.
Jul 12, 2026
President Donald Trump signed **National Security Presidential Memorandum-12 (`NSPM-12`)** to strengthen cybersecurity for U.S. **National Security Systems (NSS)**, including highly sensitive systems used to process classified information and support military and intelligence missions. The memorandum sets updated governance, accountability, and baseline security requirements intended to ensure NSS operated by civilian agencies receive protections comparable to other federal systems. The order reestablishes and modernizes the **Committee on National Security Systems (CNSS)**, giving it authority to oversee NSS cybersecurity, issue binding and emergency directives, set minimum requirements, and improve coordination and information sharing across government. It also designates the **NSA director** as the National Manager for NSS and cryptologic authority, empowering the agency to provide technical guidance, recommend incident response actions, and take emergency measures based on intelligence about adversary threats, while requiring policy reviews within three months and annual agency inventories of NSS assets.
Jun 29, 2026
US national security commentary and Defense Department testimony emphasized that **trust and cybersecurity** are being positioned as strategic differentiators in competition with China, particularly as AI capabilities proliferate. One argument framed cybersecurity as a key factor in global adoption of US AI and cloud technologies, contrasting the US private-sector ecosystem with China’s more consolidated AI cloud market and linking security posture to international trust and influence. Separately, senior DoD officials described **CYBERCOM 2.0** as a new force-generation model intended to improve agility against intensified Chinese cyber activity, including attacks on critical infrastructure involving **industrial control system (ICS) abuse** and **AI-enabled intrusions**, and highlighted efforts to “close the loop” between offensive learning and defensive readiness. A related policy critique pointed to the **Salt Typhoon** espionage campaign against US telecommunications providers as evidence that China’s access was enabled by basic security failures (e.g., legacy equipment, weak passwords, unpatched systems) and argued for mandatory operational baselines and tighter controls around **lawful intercept systems**, noting that major carriers had not convincingly demonstrated full eviction of intruders per Senate Commerce Committee discussions.
Jun 29, 2026