The FBI has released its first agency-wide, unclassified cyber strategy, laying out a roadmap to defend the American public and critical infrastructure by aggressively disrupting cyber adversaries rather than merely investigating them after the fact.[14][1][6] The 17-page document, published on September 9 and described by bureau leaders as the most substantive public cyber strategy in FBI history, organizes the division’s work around four pillars: disrupting adversaries, supporting victims, strengthening partnerships and building the capabilities the mission demands.[14][1][7] The full strategy is available on the FBI’s website as Cyber Strategy 2026.[14]
According to senior FBI cyber officials, the strategy is intended to coordinate efforts across the bureau’s 56 field offices and overseas operations against both nation-state hackers and financially motivated cybercriminals.[1][5] The document consolidates previously fragmented cyber initiatives into a single framework that directs investigative teams to impose “risk and consequences” on adversaries by using the FBI’s legal authorities, technical capabilities and long-standing partnerships across government and industry.[13][14] Reporting by Federal News Network notes that the plan also emphasizes attracting top cyber talent and retaining specialized investigators, engineers and analysts needed to execute this more aggressive posture.[1]
A central theme of the new roadmap is taking “the fight to the adversary” by dismantling the tools, infrastructure and funding mechanisms that cybercriminals and hostile governments rely on to conduct operations.[2][6][3] In a video announcement, FBI Cyber Division leaders outline how the bureau will use sustained campaigns to degrade the criminal ecosystems that support ransomware gangs, online fraud networks and malware distributors.[3][8] One example is Operation Riptide, an ongoing law enforcement effort targeting not just individual actors but also the hosting platforms, communications channels and financial services that enable them, with the stated goal of applying persistent pressure and generating cascading costs for adversaries.[8] This emphasis on disruption aligns with the broader U.S. cyber strategy, including recent executive directives calling for more proactive operations against botnets and criminal infrastructure.[8][12]
The strategy also elevates victim support to a core mission, committing FBI cyber teams to faster information sharing, more proactive outreach and a stronger focus on relief and justice for organizations hit by cyberattacks.[1][2][15] A separate briefing reported by CyberScoop describes plans to use AI-enabled tools to prioritize victim notifications, map adversary infrastructure against affected networks and surface relationships in large datasets that can accelerate remediation.[15] The bureau’s recently launched Operation Winter SHIELD illustrates this approach, offering a ten-step roadmap tied to the National Cyber Strategy and FBI Cyber Strategy that helps organizations harden both IT and operational technology environments against exploitation.[12] Winter SHIELD guidance stresses fundamentals such as preserving security logs, maintaining offline immutable backups, strengthening email authentication and regularly exercising incident response plans with all stakeholders.[12]
Strengthening partnerships with the private sector, allied governments and other U.S. cyber agencies is another pillar, reflecting the bureau’s increased reliance on shared threat intelligence and joint operations to counter rapidly evolving attacks.[1][2][11] Officials highlight ongoing collaboration with industry on ransomware, botnets and large-scale fraud schemes, framing the FBI as a long-term partner rather than a purely investigative presence that appears only after an intrusion.[2][12] Internally, the strategy commits the bureau to expand its cyber workforce and adopt AI tools under legal and policy controls, including “agentic AI” to triage massive data volumes, accelerate malware analysis and identify patterns no human analyst could process at the required pace, while also deploying AI to detect, divert and deceive threat actors where operationally appropriate.[15][5] The document further notes plans to grow the FBI’s Computer Network Operations program, enabling court-authorized technical actions to remotely collect data, conduct surveillance and disrupt the activities of nation-state and cybercriminal actors when traditional investigative techniques are insufficient.[15]
For defenders, the practical impact of the new strategy is a more persistent and visible FBI presence in cyberspace, including multi-month campaigns to dismantle infrastructure, seize criminal assets and reduce the operational freedom of threat actors.[8][15] Organizations should expect more contact from FBI cyber squads—both in response to specific incidents and through broad outreach campaigns like Operation Winter SHIELD that push concrete hardening steps such as rigorous patching, asset inventory, robust logging, resilient backups and strong email security controls.[12][15] CyberScoop’s coverage emphasizes that despite the focus on AI and advanced operations, bureau officials continue to stress “cyber basics,” warning that many successful intrusions still hinge on unpatched systems, weak authentication and insufficient monitoring.[15] By codifying this disruption-first model in an unclassified strategy, the FBI is signaling to both adversaries and defenders that future cyber operations will increasingly target the services and ecosystems that make cybercrime profitable, while treating victim assistance and partnership-building as essential components of national cyber resilience.[14][1]
References
- FBI cyber leader details bureau’s first unclassified cyber …
- FBI announces cyber strategy as Treasury ‘cracks down’ on …
- FBI Cyber 2026 Strategy
- FBI Unveils First Public Cyber Strategy, Plans Stronger …
- FBI Cyber Division on X
- FBI Director Kash Patel (@FBIDirectorKash) …
- FBI Announces Operation Riptide
- FBI working with private sector and US allies to respond to cyber attacks | The National
- FBI Urges Organizations to Take 10 Actions to Improve Cyber …
- CISA Cybersecurity Summit: Addressing Threats Through Partnerships
- Cyber Strategy – FBI.gov
- FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching
