Donald Trump has indicated, both publicly and privately, that he no longer views Russia as a significant cyber threat to U.S. national security and critical infrastructure.
This stance marks a sharp departure from years of warnings by intelligence officials and has sparked concern among cybersecurity experts, who warn that the U.S. may be leaving itself vulnerable to Russian cyberattacks at a time of heightened global tensions.
On Sunday night, reports emerged that Defense Secretary Pete Hegseth had ordered U.S. Cyber Command to halt all offensive cyber operations against Russia.
Critics warn that the policy reversal appears to be driven by the administration’s growing ties with Russian President Vladimir Putin, as Trump reshapes U.S. foreign policy in a way that increasingly aligns with Moscow’s interests.
“Russia and China are our biggest adversaries. With all the cuts being made to different agencies, a lot of cybersecurity personnel have been fired. Our systems are not going to be protected, and our adversaries know this,” a source familiar with the shift told *The Guardian.*
“People are saying Russia is winning. Putin is on the inside now,” they added.
According to a current official and two former officials briefed on the classified directive, the abrupt halt is reportedly part of a broader strategic effort to draw Putin into negotiations over Ukraine and reset relations with the U.S.
The decision marks a major shift in U.S. cyber policy against a long-standing adversary known for aggressive digital warfare, election interference, and persistent hacking campaigns.
Donald Trump has shown an increased willingness to work with the Russian President Putin
Defense Secretary Pete Hegseth has ordered US Cyber Command to cease all offensive cyberoperations against Russia
President Donald Trump ended up shouting at Ukraine’s President Volodymyr Zelensky in an extraordinary Oval Office meltdown on Friday
While some insiders argue the move is a necessary diplomatic step, critics warn it represents a dangerous retreat that could embolden Moscow to escalate cyberattacks against the U.S. and its allies.
“It’s incomprehensible to give a speech about threats in cyberspace and not mention Russia, and it’s delusional to think this will turn Russia and the FSB [the Russian security agency] into our friends,” James Lewis, a veteran cyber expert, told *The Guardian.*
“They hate the U.S. and are still mad about losing the Cold War. Pretending otherwise won’t change this.”
Hegseth’s directive, part of a broader reassessment of all U.S. military operations against Russia, has yet to be publicly explained. However, the timing—coming just before President Trump’s Oval Office confrontation with Ukrainian President Volodymyr Zelensky—suggests it is part of an effort to draw Russia into talks over the war.
The exact scope and duration of the Pentagon’s order remain unclear, especially given the blurred lines between offensive and defensive cyber operations. Traditionally, offensive cyber warfare involves actively disrupting enemy networks, deploying malware, or launching cyber strikes on critical infrastructure. Defensive cyber operations, by contrast, focus on thwarting incoming threats but often require maintaining covert access to adversary networks for intelligence gathering.
For the U.S., retaining access to Russia’s digital infrastructure is crucial for monitoring Putin’s war strategy and internal political maneuvers as he enters negotiations. Without these cyber tools, the U.S. risks being left in the dark during diplomatic talks, where deception and manipulation are hallmarks of Kremlin strategy.
By unilaterally pulling back from the ‘shadow war’ in cyberspace, the administration is effectively betting that Putin will respond in kind – dialing down Russia’s relentless cyber intrusions into U.S. networks. Trump is seen meeting Putin in 2018
President Donald Trump with Secretary of State Marco Rubio, left and Defense Secretary Pete Hegseth, right, are seen praying during a cabinet meeting
Former officials acknowledge that it is not uncommon for civilian leaders to pause military operations during sensitive diplomatic negotiations to prevent derailing discussions.
However, for President Trump and Defense Secretary Hegseth, the decision to halt cyber operations against Russia is a high-stakes gamble.
By unilaterally stepping back from the “shadow war” in cyberspace, the administration is effectively wagering that Putin will reciprocate—scaling down Russia’s persistent cyber intrusions into U.S. networks, election interference, and digital sabotage across Europe.
Russia has long used cyber warfare as a strategic tool, launching sophisticated ransomware attacks and espionage operations against American institutions, hospitals, infrastructure, and corporations.
Intelligence officials have repeatedly warned that these cyberattacks are not merely the work of independent hackers but are either sanctioned or tacitly approved by Russian intelligence agencies.
At a United Nations cybersecurity working group last week, Liesyl Franz, deputy assistant secretary for international cybersecurity at the State Department, outlined U.S. concerns about cyber threats—but notably avoided mentioning Russia.
Instead, her speech focused solely on China and Iran, omitting any reference to Moscow’s extensive history of cyber warfare, including its documented attacks on U.S. infrastructure and ongoing cyber operations in Ukraine.
Even more strikingly, Franz made no mention of LockBit, the Russia-based ransomware group that the U.S. government has previously identified as the world’s most prolific.
On Sunday, Secretary of State Marco Rubio acknowledged the urgency of bringing Russia to the negotiating table but dismissed concerns the administration is being too lenient on Putin.
Protestors hold up a sign as members of the New York Ukrainian community and supporters gather in Times Square over the weekend
The Treasury Department had previously warned that LockBit operates under a ransomware-as-a-service model, licensing its technology to criminals in exchange for a share of the profits.
However, as the U.S. faces an unprecedented surge in ransomware attacks, the administration is now choosing to turn a blind eye.
Until now, U.S. Cyber Command has taken a leading role in countering Russia’s cyber aggression, often working covertly with Britain’s Government Communications Headquarters (GCHQ).
While Britain and Canada may continue cyber operations against Russian targets, the Pentagon’s shift in focus could leave European allies vulnerable to unchecked Russian cyberattacks.
This decision to halt cyber operations comes amid broader concerns that the Trump administration is softening its stance toward Moscow.
In a dramatic diplomatic break, the U.S. recently voted against a United Nations resolution labeling Russia as the aggressor in Ukraine, instead aligning with Russia, North Korea, Iran, and Belarus.
This move alarmed U.S. allies, who fear Washington is edging toward appeasement at a time when Moscow remains committed to its military goals in Ukraine.
Even within the administration, tensions over this strategic shift are apparent.
Secretary of State Marco Rubio acknowledged the need to bring Russia to the negotiating table but dismissed concerns that the administration is being too lenient on Putin.
“You’re not going to bring them to the table if you’re calling them names, if you’re being antagonistic,” Rubio said on *ABC’s This Week*.
A participant in a demonstration against Vladimir Putin in Berlin holds up sign with Putin holding Trump on a leash
A woman carries a banner reading ‘Trump is Putin’s puppet’ during ‘We Stand With Zelenskyy And Europe’ demonstration in front of In Solidarity With Ukraine And Zelenskyy In Krakow on Saturday
Senate Minority Leader Chuck Schumer blasted the administration’s decision, arguing that the Pentagon’s retreat from offensive cyber operations effectively hands Putin a free pass
“That’s just the president’s instincts, honed over years of striking deals in the business world,” Rubio explained.
Though Rubio was not directly questioned about the decision to halt cyber operations, he bristled when asked why the U.S. was easing pressure on Moscow, insisting that the administration’s goal is peace.
“If this were a Democrat doing this, everyone would be saying, ‘Well, he’s on his way to the Nobel Peace Prize,'” Rubio scoffed. “This is absurd. We are trying to end a war.”
However, not everyone is convinced that de-escalating cyber warfare is the right approach.
Senate Minority Leader Chuck Schumer sharply criticized the administration’s decision, arguing that the Pentagon’s retreat from offensive cyber operations effectively gives Putin a free pass.
“Russia continues to launch cyber operations and ransomware attacks against critical American infrastructure, and the Trump administration is rewarding them by backing off,” Schumer warned. “This is a critical strategic mistake.”
These concerns are echoed by national security veterans who have long monitored Russia’s cyber tactics.
Under the Biden administration, U.S. intelligence agencies had warned that Russia’s ultimate goal was to undermine U.S. security, disrupt American infrastructure, and sow political chaos.
These warnings led to the creation of specialized cyber task forces within the National Security Agency and Cyber Command, designed to counter Russian cyberattacks in real-time.
But under Hegseth’s new directive, those efforts seem poised to be scaled back, leaving the U.S. more vulnerable.
