US Leadership Backtracks in Battle Against Russian Cyber Aggression

At a glance

• Resistance to Acknowledgment: Reports in late February 2025 said the administration was scaling back work against Russian cyber threats.
• Uproar Over Russian Tactics: Defense Secretary Pete Hegseth ordered U.S. Cyber Command to pause planning against Russia, according to The Record.
• Strategic Gaps: Critics say pulling back while Russian groups stay active leaves U.S. networks exposed.
• Expert Warnings: Former officials and security researchers are urging Congress to step in.

The U.S. eases off Russia in cyberspace

In late February 2025, reports surfaced that the Trump administration was pulling back from parts of its fight against Russian hacking. Defense Secretary Pete Hegseth ordered U.S. Cyber Command to stand down on planning operations against Russia, The Record reported, and other outlets confirmed the order. Days earlier, The Guardian reported that CISA analysts had been told not to follow or report on Russian threats. The moves came as the White House sought talks with Moscow over the war in Ukraine.

What the reports said

The Guardian’s account described a new direction at CISA that deprioritized Russia. DHS and CISA denied it. They said the agency’s posture toward Russian cyber threats had not changed, while the Pentagon did not dispute the Cyber Command pause, which reportedly did not cover the NSA’s intelligence work.

Russian activity hasn’t slowed

Russian state hackers have a long record of attacks on U.S. targets, from the SolarWinds supply chain breach disclosed in 2020 to campaigns against Ukraine’s allies. Security researchers say those groups remain active, which is why the reported pullback drew such alarm.

Where critics see gaps

Critics argue that U.S. defense policy has not kept pace with the methods adversaries use. Some of the breaches of recent years came through vulnerabilities that had been known for months but were never patched, a problem no change in diplomatic posture will fix.

What experts want

Former officials and security leaders want Congress to press the agencies for answers. Some have proposed a dedicated task force to counter foreign cyber threats.

What it means for U.S. defenders

The U.S. is still working out how to respond to Russian hacking while its diplomatic approach to Moscow shifts. Agencies insist their work continues. Critics will want proof in the form of public advisories, staffing and funding, and private network owners should keep defending against Russian groups regardless of what happens in Washington.

Frank Jones, CISSP

Frank Jones has loved computers from the age of 13. Frank got his hacking career started when he downloaded a war dialing program that he used to detect dial up modems in his hometown of Chicago. Frank Jones now works as a JAVA coder and cyber security researcher.