VORANT. Threat Intelligence Research Create a free account

Haugh details CYBERCOM defend-forward strategy

Published Vorant ratingroutine threat Government (National)Defense

Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

US Cyber Command's Gen. Haugh outlines a year of policy clarity, including forward defense and the 2018 IRA takedown during midterms.

Sourceatlanticcouncil.org — open the original

What to check

Applies to
Whether this concerns you is not assessed; the names the report mentions are listed below.

This is a policy overview rather than a threat report. US Air Force Brig. Gen. Timothy Haugh, commander of Cyber National Mission Force at US Cyber Command, discussed the command's evolution one year after its elevation to a unified combatant command. He outlined three lines of effort: gaining insight into adversary activity via NSA partnership, enabling international and industry partners through a 'defend forward' model, and being prepared to impose costs on adversaries.

Haugh referenced legal and strategic changes affirming DoD authority to conduct cyberspace operations and enabling interagency cooperation against Russia, China, Iran, and North Korea. He also alluded to a previously reported action—without confirming or denying—in which US Cyber Command reportedly disrupted internet access for Russia's Internet Research Agency (IRA) troll farm during the 2018 US midterm elections to prevent influence operations.

The piece is informational and strategic in nature, with no active exploitation, malware, or specific technical indicators described. It reflects broader US government posture on cyber defense of critical infrastructure and coordination between DoD, DHS, FBI, and international partners.

Mentioned in this report

Threat actors Internet Research Agency

Source reporting: https://www.atlanticcouncil.org/blogs/new-atlanticist/an-increase-in-clarity-in-us-cyber-strategy

Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.

What this brief leaves out

This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the actors it names. The paid plans add the security research and news reporting the free tier leaves out.

It sits in a corpus of 16,436 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.

A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.

Create a free account   What it costs