Loading story…
The FBI released its first public cybersecurity strategy, a 17-page unclassified plan to counter cybercrime, nation-state intrusions and digital criminal groups. Its four pillars are imposing costs on adversaries, supporting victims, expanding industry cooperation, and strengthening FBI digital capabilities. The bureau will direct its 56 field offices and overseas personnel to coordinate investigations and accelerate sequenced disruption operations; it has conducted 50 such operations since early 2025, including actions against Russian GRU activity targeting U.S. home routers and the joint disruption of Lumma malware infrastructure with Microsoft.
The strategy calls for human-reviewed and legally controlled AI use in malware analysis, infrastructure mapping, relationship analysis, attribution, threat-pattern detection and prioritizing victim notifications. FBI officials said AI is increasing adversaries’ speed and vulnerability-discovery capabilities, while urging organizations to adopt continuous risk-based patching and maintain fundamentals such as multifactor authentication. Cyber Division leadership also pressed victim organizations to share incidents sooner, stressing that the FBI can help eradicate intruders and preserve evidence without passing reports to regulators for regulatory enforcement; the bureau plans faster threat-intelligence sharing, expanded industrial-control-system coordination, and stronger protections for victim privacy.
See the reporting duties and controls this puts on the clock.
5 events from the most recent confirmed update back to the earliest known activity.
The strategy calls for human-reviewed and legally controlled AI use in malware analysis, infrastructure mapping, relationship analysis, attribution, threat-pattern detection, and prioritizing victim notifications. It also commits to faster incident response, privacy-conscious victim support, expansion of Industrial Control Systems coordinators, and development of lawfully authorized computer network operations.
The FBI released a 17-page unclassified public cyber strategy covering criminal and national-security threats. It directs the bureau’s 56 field offices and overseas cyber personnel to coordinate investigations, support victims, expand partnerships, and increase the pace of disruption operations and threat-intelligence sharing.
A presidential memorandum directed the Departments of Justice and Homeland Security to establish operating procedures and participation standards for a federally supervised program allowing vetted U.S. companies to conduct operations against foreign criminal organizations. Nation-state threat groups are excluded from the proposed program.
Since the beginning of 2025, the FBI has conducted 50 “sequenced operations” against cyber threats, including operations targeting Russian military intelligence activity on vulnerable U.S. home routers and Lumma malware infrastructure.
FBI officials said AI is increasing the speed and capability of nation-state and criminal cyber actors, while AI-driven vulnerability discovery makes periodic patching insufficient. They recommended continuous, risk-based patching and stressed that basic controls such as multifactor authentication remain effective.
See what this changes for your reporting obligations and which controls it puts on the clock.
9 references tracked. Mallory keeps watching after this page renders.
health-isac.org
Open sourceinfosecurity-magazine.com
Open sourcemalware.news
Open sourcetherecord.media
Open sourcenextgov.com
Open sourcecyberscoop.com
Open sourcefbi.gov
Open sourcecyberscoop.com
Open sourcefbi.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The White House Office of the National Cyber Director (ONCD) said a forthcoming U.S. national cyber strategy will prioritize **rapid but secure adoption of AI** for cyber defense, aiming to expand the use of AI-enabled tools to *detect, divert, and deceive* threat actors without unintentionally widening the attack surface. ONCD policy lead Alexandra Seymour also highlighted plans to advance U.S. **AI cybersecurity standards**, establish industry best practices for secure AI deployment, and pursue “counter-AI” efforts to protect frontier models and counter adversary use of AI. The strategy is also expected to include a pillar focused on strengthening the cybersecurity workforce by aligning curriculum, workforce standards, cyber literacy, and job placement across government, industry, and academia. Separately, ONCD indicated U.S. cyber responses will be more explicitly **linked to adversary actions** and will require closer coordination with **state/local governments and critical infrastructure owners/operators**, reflecting a more assertive posture driven in part by recent high-profile intrusions into U.S. critical infrastructure (including telecom). In parallel with these federal strategy signals, the U.S. Treasury Department announced it will publish a set of resources created by a public-private coalition to improve **cyber risk management for AI systems in the financial sector**, intended to support secure AI adoption as banks expand AI use for fraud detection, customer service, trading, and risk modeling—areas that can introduce new vulnerabilities due to sensitive data dependencies and third-party/vendor exposure.
Jun 29, 2026
President Donald Trump released a long-awaited **national cybersecurity strategy** and signed an accompanying **executive order** directing federal agencies to take action against cybercrime and fraud. The strategy is described as deliberately high-level and organized around six pillars: **shaping adversary behavior** (including greater use of U.S. offensive and defensive cyber capabilities and encouraging private-sector disruption of adversary infrastructure), **promoting “common sense” regulation** (criticizing compliance “checklists” and signaling interest in liability discussions), **modernizing and securing federal networks**, **securing critical infrastructure**, **sustaining superiority in critical and emerging technologies**, and **building cyber talent and capacity**. Multiple reports highlight the strategy’s shift toward a more **direct, “gloves-off” posture** in responding to adversarial cyber threats, with the White House framing it as a recalibration toward more forceful action against actors targeting U.S. networks. The document also ties cyber operations to broader national objectives, explicitly referencing recent administration actions (including operations linked to Iran and Venezuela) as examples of a willingness to use cyber capabilities in support of national missions, while also emphasizing emerging technologies (including **AI**) and workforce development as key enablers of the strategy’s goals.
Jun 29, 2026
The U.S. government is preparing to release a new National Cyber Strategy aimed at deterring foreign cyber adversaries and strengthening public-private collaboration. National Cyber Director Sean Cairncross announced at the Aspen Cyber Summit that the strategy will be concise, actionable, and structured around six pillars, including shaping adversary behavior and enhancing industry partnerships. The strategy intends to move beyond traditional defensive measures by introducing clear costs and consequences for malicious cyber activity targeting U.S. critical infrastructure, reflecting a shift toward a more offensive and coordinated national approach. Officials highlighted that the new strategy will differ from previous versions by focusing on rapid implementation of action items and deliverables, rather than lengthy policy documents. The approach seeks to address the fragmented nature of current U.S. cyber responses by establishing a unified, government-wide framework. The strategy is currently under review by federal agencies, with input from the FBI and private sector leaders, and is expected to be released soon. The administration aims to modernize federal cyber capabilities, accelerate technology adoption, and send a strong deterrent signal to both nation-state and criminal cyber actors.
Jul 12, 2026