US Eases Off Russia in Cyberspace

Russia won’t have the United States to worry about in cyberspace in an apparent concession to Moscow meant to grease talks between the two capitals over the fate of Ukraine.

See Also: OnDemand | North Korea’s Secret IT Army and How to Combat It

Multiple media reports show that Defense Secretary Pete Hegseth ordered U.S. Cyber Command to halt offensive cyber operations and information operations against Russia. The Record first reported the guidance on Friday, which does not affect signals intelligence gathering.

The Washington Post reported the pause is meant to last so long as U.S. President Donald Trump is seeking an agreement with Russian President Vladimir Putin ending the Kremlin war of conquest against Ukraine – likely on terms favorable for Russia. Defense officials have told reporters that the Pentagon does not discuss cyber intelligence, plans, or operations.

The order garnered criticism from Democratic Senate Minority leader Chuck Schumer, who characterized Trump as “desperate to earn the affection of a thug like Vladimir Putin.” Trump “appears to be giving him a free pass as Russia continues to launch cyber operations and ransomware attacks against critical American infrastructure, threatening our economic and national security,” Schumer tweeted Sunday.

A more aggressive Cyber Command is something Republicans and Demcrats alike have endorsed, with Trump during his first term giving the military expanded authority to conduct offensive cyber operations. The Biden administration in 2023 published a national cybersecurity strategy vowing to use “all instruments of national power” to target malicious actors.

The change comes amid an apparent reorientation in U.S. foreign policy to be more favorable to Russia – a transformation underscored by a shouting argument that broke out between Trump, Vice President JD Vance and Ukrainian President Volodymyr Zelenskyy in the Oval Office on Friday. The Russian government quickly signaled approval, with a Kremlin spokesman stating that the Trump administration “largely aligns with our vision,” the Washington Post reported.

The United States has long viewed Russia as a cyberspace foe given activities such as the Russian Foreign Intelligence Service’s 2019 hack of network management software firm SolarWinds and ongoing campaigns to penetrate the email inboxes of government employees (see: Microsoft Warns of Ongoing Russian Intelligence Campaign). Then-U.S. President Joe Biden confronted Putin in 2021 over hacking, warning the Russian leader against breaching American critical infrastructure.

The New York Times reported that U.S. officials have detected Russian hacking activity inside U.S. networks as recently as during the first weeks of the Trump administration, which assumed power Jan. 20 – roughly six weeks ago.

“Russia will pose an enduring global cyber threat even as it prioritizes cyber operations for the Ukrainian war,” was the conclusion of the U.S. intelligence community in its latest annual threat assessment. “Moscow views cyber disruptions as a foreign policy lever to shape other countries’ decisions and continuously refines and employs its espionage, influence, and attack capabilities against a variety of targets.”