# NSA Reinstates Elite Hacking Unit: Tailored Access Operations (TAO) Returns The **National Security Agency (NSA)** recently announced a significant rebranding of its elite hacking division, reverting its Office of Computer Network Operations (CNO) back to the familiar **Tailored Access Operations (TAO)**. This move is poised to resonate deeply within the cybersecurity community, evoking a sense of nostalgia for a unit with roots dating back to the early 1990s. ## A Strategic Reorganization for Evolving Threats The change is a core component of a larger reorganization spearheaded by new **NSA** leadership. The objective is to bolster the agency's capability to address sophisticated digital threats emanating from global adversaries, particularly **China** and **Russia**. This restructuring effectively undoes elements of a previous internal reshuffle known as **NSA21**, launched in 2016. **NSA21** had integrated offensive operations and intelligence collection into broader directorates, dismantling **TAO** as a standalone office. **NSA** Deputy Director **Tim Kosiba**, a former **TAO** member, is credited with leading this latest strategic reversal. An anonymous former agency employee commented, "**NSA21** was not looked at as a useful thing. We were on a path to move developers and operators closer. They split them apart instead. I think they just look at that back as the heyday of the operations, so there's a nostalgia there." ## Pentagon Endorsement and Renewed Focus The revamped structure was presented to Defense Secretary **Pete Hegseth** during his recent visit to Fort Meade, Maryland, home to both the **NSA** and **U.S. Cyber Command**. Secretary **Hegseth** even shared a picture of a signed **TAO** hat on his official **X** account, signaling high-level endorsement. Other former **NSA** personnel believe that reuniting these two critical functions under a single banner, physically manifested by a new **TAO** building on the Fort Meade campus next month, will accelerate operations and foster greater innovation. This is especially crucial for penetrating challenging networks, particularly with the advancements in artificial intelligence. An **NSA** spokesperson affirmed the decision, stating, "**TAO** restores a powerful identity that has resonated deeply. **TAO** has a strong history of mission outcomes and we are honoring it and using the weight it carries to propel us into the future." ## The Legacy of Tailored Access Operations As its name implies, **TAO** specializes in developing and deploying bespoke tools to infiltrate foreign computer networks for espionage. The unit crafts custom implants and other software-based methods, showcasing its unique capability in offensive cyber operations. Notably, **TAO** was instrumental in developing **Stuxnet**, the sophisticated cyber weapon used to disrupt **Iran**'s nuclear program. **TAO** gained widespread public attention approximately a decade ago with the emergence of **The Shadow Brokers**, a mysterious internet group that advertised the sale of stolen **TAO** hacking techniques. It is widely believed that **Russia** and **North Korea** leveraged these pilfered tools to launch devastating global cyberattacks. A prime example is the **WannaCry** ransomware attack in 2017, which utilized the **EternalBlue** exploit, impacting 200,000 organizations across 150 countries. Around the same period, federal prosecutors indicted former **NSA** contractor **Harold Martin** for hoarding vast amounts of classified information at his Maryland residence. **Martin**, employed by **Booz Allen Hamilton**, worked at the **NSA** from 2012 to 2015, including a stint within **TAO**. Although investigators found no evidence that **Martin** shared the stolen secrets, he was sentenced to nine years in prison in 2019.