Experts urge U.S. offensive cyber pressure on Russia
- Growing Concerns: Rising cyber threats from Russia have experts calling for a stronger U.S. response.
- Emerging Developments: Recent incidents have exposed weaknesses in U.S. defenses.
- Strategic Experts Speak: Some experts argue for offensive operations alongside joint defense with allies.
Russia’s campaign against U.S. networks
Cyberattacks linked to Russian state actors keep coming. Security experts say they are getting more sophisticated and more frequent, hitting critical infrastructure and private companies across the U.S. alike. Geopolitics makes it worse. Experts want a firmer response from Washington, but a carefully calculated one.
A recent discussion on WBUR pointed to Russian cyber operatives involved in disruptive activity aimed at weaknesses in critical systems. Many security professionals argue that defense alone won’t stop it. In their view, the U.S. has to go on offense.
SolarWinds and ransomware exposed the gaps
The SolarWinds breach and a string of ransomware attacks exposed serious weaknesses in U.S. defenses. Both prompted spending. Both showed how much older government and corporate infrastructure still needs replacing.
Know what matters before your first meeting.
Get the weekday cyber brief for the AI risk, regulation, abuse, and enterprise security changes this article could not cover.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Officials have pushed for better threat intelligence and machine learning to spot attacks earlier. Practitioners say purely defensive postures can’t keep up with adversaries who change tactics constantly.
The argument for going on offense
Some experts see offensive cyber operations as the main way to deter Russian attacks. Speakers in the WBUR segment described aggressive measures that would go beyond defense to disabling or disrupting adversary systems.
That could mean using nation-state cyber capabilities against an adversary’s command and control systems. Such moves carry ethical and geopolitical risks, including escalation, and would need careful debate and coordination with allies.
Allies and policy questions
Closer alliances would help. Partnerships between countries could lead to shared policy on cyber defense, with more information sharing and joint response.
The U.S. could lead talks within NATO to set norms for cyber conflict and agree in advance on how allies would respond to a serious attack on any one of them. Collective defense deters.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Offense, defense, or both
Russian cyber pressure isn’t easing. Whatever mix Washington picks, offensive operations, alliances or better defenses, the response has to be careful and decisive at once.
Most experts favor a balance of offense and defense that accounts for the political and ethical risks. Policymakers, technologists and security specialists will have to agree on where the lines are before the next major attack, not after.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Monday’s brief: ConnectWise Cloud Backup comes back, then Aruba Wi-Fi fixes, a Brotli update and Nextcloud’s KEV deadline
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.