# FBI Unveils First Public Cybersecurity Strategy to Combat Rising Digital Threats The **Federal Bureau of Investigation (FBI)** has publicly released its first-ever cybersecurity strategy, outlining a detailed plan to combat the escalating threat landscape posed by malicious hackers and sophisticated digital criminal gangs. **Brett Leatherman**, Assistant Director of the **FBI**’s Cyber Division, highlighted the strategy's importance during a roundtable discussion at the Billington Cybersecurity Summit in Washington, D.C. “This is a comprehensive strategy that directs our teams, our field offices, our global presence, and how we are to align all our efforts to counter this work,” Leatherman stated. He emphasized the increasing complexity, sophistication, and tempo of cybercrime and nation-state hacking. “For us, it's important that we prioritize how we approach this because when you can't handle every little thing that happens out there, you've got to prioritize what you do and how you do it as well.” While the bureau has maintained similar strategies internally, they have largely been classified or restricted to specific threat units. This 17-page public document, devoid of classified annexes, follows a series of 50 “sequenced operations” conducted by the **FBI** since early 2025. These include high-profile actions such as driving **Russian military intelligence services** from vulnerable U.S. home routers and a joint operation with **Microsoft** to dismantle the infrastructure of the **Lumma malware**. Leatherman noted that the new strategy incorporates elements from the Trump administration’s cybersecurity strategy, recent executive orders on countering digital criminals, and a memorandum allowing private industry participation in disruptive online operations. ## Pillars for Cyber Operations The inaugural document establishes four key “pillars” guiding the bureau’s operations under its criminal and national security cyber authorities. These pillars encompass imposing costs on adversaries, providing victim support, fostering industry collaboration, and enhancing the **FBI**’s internal digital capabilities. Leatherman explained that this overarching plan will prompt the Cyber Division’s threat teams – focused on countering threats from entities like **China**, **Russia**, and various criminal gangs – to develop their own classified strategies, which will eventually be integrated. While an implementation plan is still in development, many teams already have existing strategies that will be adjusted to align with this new framework. Success metrics for the Cyber Division will mirror those of other law enforcement agencies, focusing on arrests, recovered funds, and victim engagement. Leatherman stressed a shift towards proactive disruption: “The most important change I hope people will see is that we don't sit and wait for the best opportunity to take action.” He added, “As opposed to waiting for large joint sequenced operations that happen half a dozen times a year, you're going to start to see many more of those of consequence because we are engaged in that urgent steady state opportunity to disrupt adversaries.” This increased operational tempo, combined with recent **FBI** actions, is expected to reduce digital threats. “We're not under the illusion that we'll ever negate the cyber threat directive in the United States, but our goal is to change behavior, and I believe we're doing that,” Leatherman affirmed, citing a decrease in ransomware payments and behavioral shifts among companies supporting nation-state hacking regimes. “I believe that we're having an impact. I believe that signaling what we're what we're doing here over the last six months and will continue to do here in the next six to 12 months, I believe will have a determined impact. Americans will see a positive change to the result of that.”