Introduction to the Shift in US Cybersecurity Policy

It appears that the United States is no longer viewing Russia as a significant cyber threat, according to recent reports that highlight a drastic reversal in policy under the Trump administration.

The Policy Reversal

The cybersecurity publication, The Record, initially reported that under the new Defense Secretary, Pete Hegseth, US Cyber Command has received orders to "stand down from all planning against Russia, including offensive digital actions." This information is based on insights from three anonymous sources familiar with the matter. Notably, this order does not extend to the National Security Agency.

Historical Context of US-Russia Cyber Relations

This shift in policy represents a complete reversal from the stance the US has held over the past decade, where Russia has consistently been considered one of the top cybersecurity threats. There have been numerous credible reports and government investigations demonstrating that Russia has infiltrated US systems on multiple occasions.

Recent Developments and Implications

The Guardian reported on a memo circulated to staff at the Cybersecurity and Infrastructure Security Agency (CISA), which outlined "new priorities" for the agency. While the memo acknowledged the threat posed by digital incursions from China and other adversaries, it notably did not mention Russia. A source familiar with the internal memo expressed concern, stating, "Russia and China are our biggest adversaries. With all the cuts being made to different agencies, a lot of cybersecurity personnel have been fired. Our systems are not going to be protected, and our adversaries know this." The source further added, "People are saying Russia is winning. Putin is on the inside now."

Concerns Among Intelligence Community

Another anonymous source shared that CISA staff had been verbally informed not to follow or report on Russian threats. This source expressed concern over the shift, emphasizing, "There are thousands of US government employees and military working daily on the massive threat Russia poses as possibly the most significant nation-state threat actor. Not to diminish the significance of China, Iran, or North Korea, but Russia is at least on par with China as the most significant cyber threat."

Recent Actions by the US Intelligence Director

The US’s new Director of National Intelligence, Tulsi Gabbard, has taken significant action, firing about 100 National Security Agency employees found to have participated in sexually explicit chats on work computers. Gabbard described their behavior as "brazen" and "horrific," highlighting the misuse of an NSA platform intended for professional use.

Broader Impact on the Intelligence Community

While the layoffs at the NSA are notable, they represent a small fraction of the agency’s workforce. The NSA, one of the intel community’s largest outfits, is believed to employ at least 20,000 employees, with estimates suggesting the number could be as high as 50,000. Despite Trump’s promises to drastically reform the "deep state," the US’s national security state has remained largely intact since his administration took office, with most of the restructuring efforts targeting agencies that provide public services rather than the intelligence community.