{"id":12486,"date":"2025-03-13T11:16:00","date_gmt":"2025-03-13T10:16:00","guid":{"rendered":"https:\/\/blog.prif.org\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/"},"modified":"2025-03-13T11:16:00","modified_gmt":"2025-03-13T10:16:00","slug":"us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe","status":"publish","type":"post","link":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/","title":{"rendered":"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe"},"content":{"rendered":"<p><em>Update: According to other media reports and a Twitter account, the U.S. Secretary of Defense has not ordered the withdrawal of US Cyber Command. A post from the \u201cOfficial Rapid Response Account For The DOD\u201d on X states: \u201cTO BE CLEAR: @SecDef has neither canceled nor delayed any cyber operations directed against malicious Russian targets and there has been no stand-down order whatsoever from that priority.\u201d<\/em><\/p>\n<p><em>Given these conflicting reports, it is difficult to determine which tasks the US Cyber Command is really allowed to continue to perform, and how it relates to sharing intelligence information. Either way, the signal to the EU and NATO partners \u2013 if there was one and not simply incompetence on the part of the political actors \u2013 as well as the lessons to be learned should be clear. The analyses below therefore remain valid.<\/em><\/p>\n<p><strong>In a major shift in U.S. cybersecurity policy, Defense Secretary Pete Hegseth has ordered U.S. Cyber Command to halt all planning against Russia, <a href=\"https:\/\/therecord.media\/hegseth-orders-cyber-command-stand-down-russia-planning\" target=\"_blank\" rel=\"noopener\">including offensive cyber operations<\/a>. This policy change, made behind closed doors, represents a significant reversal of the approach taken under the Biden administration, which had <a href=\"https:\/\/www.voanews.com\/a\/russia-china-leading-wave-of-unprecedented-intelligence-threats-to-us-\/7726548.html\" target=\"_blank\" rel=\"noopener\">identified Russia and China as the most significant intelligence threats to the United States<\/a>. The decision aligns with the broader foreign policy direction of the Trump administration, which aims to \u201cde-escalate\u201d tensions with Russia, though it seems to be more of an appeasement. And this policy shift obviously comes at the <a href=\"https:\/\/gizmodo.com\/congress-freaks-out-over-trumps-decision-to-halt-cyber-operations-against-russia-2000570855\" target=\"_blank\" rel=\"noopener\">expense of national<\/a> and <a href=\"https:\/\/www.politico.eu\/article\/france-has-trouble-understanding-us-halt-on-cyber-operations-against-russia\/\" target=\"_blank\" rel=\"noopener\">allied security<\/a>, as has become frighteningly clear in recent days with the example of the \u2013 one can hardly call it anything else \u2013 \u2018blackmail\u2019 of Ukraine, which was <a href=\"https:\/\/www.dw.com\/en\/how-will-the-end-of-us-military-aid-affect-ukraine\/a-71828431\" target=\"_blank\" rel=\"noopener\">temporarily denied military<\/a> and <a href=\"https:\/\/www.reuters.com\/world\/us-cuts-off-intelligence-sharing-with-ukraine-ft-reports-2025-03-05\/\" target=\"_blank\" rel=\"noopener\">intelligence support<\/a> by the US.<\/strong><\/p>\n<h2>The Policy Change: What Happened?<\/h2>\n<p>The order to halt all cyber operations against Russia was issued behind closed doors, <a href=\"https:\/\/www.theguardian.com\/us-news\/2025\/jan\/16\/biden-cyber-china-russia\" target=\"_blank\" rel=\"noopener\">marking a stark departure from the previous administration\u2019s cybersecurity strategy<\/a>. Under President Biden, the U.S. maintained a strong cyber posture, actively engaging Russian and Chinese networks to prevent cyber threats before they could materialize. The <a href=\"https:\/\/www.dni.gov\/files\/NCSC\/documents\/features\/NCSC_CI_Strategy-pages-20240730.pdf\" target=\"_blank\" rel=\"noopener\">National Counterintelligence Strategy of 2024<\/a>, signed by Biden, identified Moscow and Beijing as the most significant intelligence threats to the United States. This document underscored the importance of proactive cyber defense in countering these threats by collecting intelligence. Adding to the confusion that followed this drastic step is the ambiguity surrounding whether this policy also applies to the Cybersecurity and Infrastructure Security Agency (CISA), which operates under the Department of Homeland Security (DHS) and is responsible for monitoring and protecting U.S. critical infrastructure from cyber threats. While some reports suggested that CISA might still be active in countering Russian cyber threats, an official statement posted on X (formerly Twitter) from CISA\u2019s official account appeared to walk back this assertion, leaving the extent of U.S. cyber defenses against Russian threats uncertain.<\/p>\n<h2>Why This Matters: The Importance of U.S. Cyber Command<\/h2>\n<p>The implications of this decision are far-reaching, affecting not only U.S. cybersecurity posture but also the security of European allies and Ukraine.<\/p>\n<p>So far, no official document has been released yet by the US Department of Defense on the decision, so any assessment is based on a shaky foundation, while the exact wording counts. For one, this relates to the exact nature of what is meant by the reported order to pause all \u201coffensive operations against Russia\u201d. Most reports state that this does not affect NSA\u2019s intelligence and cybersecurity efforts to monitor and counter Russian cyber threats. But how might this work when the U.S. Cyber Command, headquartered at Fort Meade, Maryland, operates under the same leadership as the National Security Agency (NSA)? This close integration has been a crucial aspect of U.S. cyber defense for the last two decades, allowing for seamless intelligence sharing, coordinated cyber operations and most likely also the pooled know-how and technical expertise. Given this interconnected structure, it is highly questionable whether the NSA\u2019s activities will remain unaffected by the new directive. If the U.S. is indeed seeking to improve relations with Russia, intelligence-gathering activities targeting Russian networks may also be curtailed.<\/p>\n<p>Additionally, it is important to highlight that over the past few years U.S. cybersecurity policy has evolved from a primarily defensive strategy \u2013 focused on securing its own networks \u2013 to a more proactive \u201cdefend forward\u201d approach. This strategy involved engaging adversaries within their own networks, collecting intelligence, preparing leverage and disrupting potential cyber threats before they could impact U.S. infrastructure. So, from a practical perspective, there is no actual difference between \u201cjust intelligence gathering\u201d and \u201coffensive\u201d operations, as both required hacking foreign IT systems, breaking or circumventing security measures, and planting one\u2019s own code \u2013 that either penetrates the systems or collects data. Just as a burglar in a house, once the door has been forcefully opened, can either steal valuables or set fire to the sofa. This figurative open door in the foreign IT system is a disruption and destabilization in any case, and as such, adversary cyber units cannot distinguish if it\u2019s \u201cjust spying\u201d. On the contrary, they must assume that US forces have planted even more code that has not been detected, installed more backdoors, or hidden more destructive suprises.<\/p>\n<p>It\u2019s this approach of creating \u201cfriction\u201d, that has been proven effectively in preventing cyberattacks on the US and for supporting allies, particularly in Europe, where Russian cyber operations have been a persistent threat. With the freeze on operations against Russia, all such activities have ceased.\u00a0 Furthermore, U.S. intelligence activities and threat-sharing mechanisms have been vital for allies, with U.S. Cyber Command and the NSA serving as some of the most important sources of intelligence on Russian cyber activities. By stepping back from these operations, the U.S. may be inadvertently weakening the cybersecurity posture of its allies, particularly those belonging to NATO and the European Union.<\/p>\n<h2>The Consequences of the Policy Shift<\/h2>\n<p><u>1. Increased Vulnerability of U.S. Infrastructure<\/u><\/p>\n<p>By withdrawing from offensive cyber operations against Russia, the Trump government removes not only a critical layer from its cyber defenses but also from U.S. national security. The \u201cdefend forward\u201d strategy was designed to disrupt adversaries before they could launch cyberattacks against U.S. critical infrastructure. It is also unclear whether the pause on offensive operations requires U.S. cyber operators to completely withdraw from adversary networks and suspend all ongoing or long-term activities. In other words, must they fully exit Russian networks or are they required to \u201cjust\u201d halt further \u201ceffects-based\u201d actions while maintaining their current access and presence without further activities? This distinction is significant for future operations \u2013 if a complete withdrawal is mandated, any future penetration efforts would need to start from scratch. Additionally, such a pause would grant Russian cyber defenders ample time to analyze past activity, conduct forensic investigations on U.S. trade craft, and refine their defenses without the challenge of active U.S. counterintelligence deception or other counter-forensic measures.<\/p>\n<p>In any case, without these proactive measures, Russian cyber actors may find it easier to target American government agencies, financial institutions, and energy grids. Congressional officials and cybersecurity experts have expressed concern that this decision exposes critical U.S. infrastructure to an increased risk of cyberattacks.<\/p>\n<p><u>2. Empowerment of Russian Cyber Operations<\/u><\/p>\n<p>The US Cyber Command withdrawal can, on the one hand, be interpreted as a diplomatic signal that Russian offensive operations will have few or no negative retaliating consequences for their own networks. This would be a very worrying development as Russia has long been identified as one of the most active cyber threat actors in the world. Groups linked to Russian intelligence, such as APT28 (<em>Fancy Bear<\/em>) and APT29 (<em>Cozy Bear<\/em>), have conducted espionage, hacking, and disinformation campaigns targeting governments, businesses, and media outlets across the globe.<\/p>\n<p>Additionally, Russia is a major hub for cybercrime, with ransomware groups like <em>LockBit<\/em> and <em>Conti<\/em> operating from Russian territory with little interference \u2013 and likely with active backing &#8211; from the Kremlin. By halting its cyber activities against Russia, the U.S. may be unintentionally emboldening these groups, providing them with a freer operational environment. This could have devastating consequences, not only for the U.S. but also for European allies that have been frequent targets of Russian cyber aggression.<\/p>\n<p><u>3. Consequences for Ukraine<\/u><\/p>\n<p>One of the most immediate and severe consequences of this policy shift has already felt in Ukraine, where the U.S. Cyber Command has deployed \u201chunt forward\u201d teams to Ukraine, actively identifying and countering Russian cyber threats within Ukrainian systems. This support has been crucial in helping Ukraine defend its critical infrastructure, including energy grids, military networks, and government agencies.<\/p>\n<p>In addition to direct cyber defense, U.S. intelligence gathered through cyber activities has been a major decision-making resource for Ukraine. Companies like Palantir have provided AI-driven intelligence analysis that has helped Ukraine respond to <a href=\"https:\/\/united24media.com\/war-in-ukraine\/palantir-the-secretive-tech-giant-shaping-ukraines-war-effort-5519\" target=\"_blank\" rel=\"noopener\">battlefield developments<\/a>. Even though it seems that the <a href=\"https:\/\/www.reuters.com\/world\/us-ukraine-meet-saudi-arabia-after-disastrous-white-house-talks-2025-03-11\/\" target=\"_blank\" rel=\"noopener\">U.S. will continue sharing intelligence with Ukraine<\/a>, this assurance is undermined by the broader shift in U.S. policy and the US demonstrated willingness to use dependencies for negotiating leverage \u2013 which is a harmless-sounding euphemism for a situation that could only be understood by the Ukrainians as a blatant threat to throw their country \u201cunder the bus\u201d. And there are even more dependencies, like Starlink, a <a href=\"https:\/\/www.tagesschau.de\/ausland\/europa\/ukraine-starlink-102.html\" target=\"_blank\" rel=\"noopener\">vital source for Ukrainian military communication and tactical defense planing<\/a>, that must be considered as shaky, given the <a href=\"https:\/\/kyivindependent.com\/starlink-will-never-shut-off-its-terminals-in-ukraine-musk-says\/\" target=\"_blank\" rel=\"noopener\">strongly mixed<\/a>&#8211;<a href=\"https:\/\/www.reuters.com\/technology\/social-media-platform-x-down-thousands-users-downdetector-shows-2025-03-10\/\" target=\"_blank\" rel=\"noopener\">messages<\/a> from Elon Musk.<\/p>\n<p><u>4. The Impact on European Allies<\/u><\/p>\n<p>European nations have relied heavily on U.S. cyber intelligence to counter Russian cyber threats. The decision to scale back U.S. Cyber Command\u2019s activities reduces the visibility of Russian threat actors and could leave European allies more vulnerable to Russian cyberattacks, creating a security vacuum that Moscow may exploit.<\/p>\n<p>More broadly, the U.S. decision to halt cyber operations against Russia may foreshadow a larger U.S. retreat from European security commitments. Cyber troops are often seen as the digital equivalent of military presence, so pulling them back could be interpreted as an early sign of a withdrawal of U.S. troops from Europe. If the U.S. continues to shift its focus toward China, Russia may be granted a freer hand in Europe.<\/p>\n<p>This concern is further reinforced by the fact that U.S. officials have stopped publicly naming Russia as a primary cyber threat. A key signal of this shift came when Liesyl Franz, deputy assistant secretary for international cybersecurity at the State Department, recently addressed a United Nations working group on cybersecurity. In her speech, she discussed cyber threats posed by nation-states but <a href=\"https:\/\/www.theguardian.com\/us-news\/2025\/feb\/28\/trump-russia-hacking-cyber-security\" target=\"_blank\" rel=\"noopener\">notably omitted any mention of Russia<\/a>, instead focusing solely on threats from China and Iran.<\/p>\n<h2>Conclusion: A Dangerous Shift in Cybersecurity Policy<\/h2>\n<p>This shift in U.S. cyber policy must be understood as an attempt to normalize relations with Russia, despite the ongoing cyber threats posed by Moscow to the U.S. and its allies. Officially, Russia is no longer seen as a cyber adversary \u2013 a dramatic departure from previous U.S. intelligence assessments. A possible outcome of this shift is that Russia, no longer needing to fend off U.S. cyber operations, will redirect its full cyber capabilities toward European targets. Meanwhile, the U.S. may be positioning itself for strategic trade deals with Russia, potentially securing raw materials deliveries or economic concessions in exchange for cyber and military restraint \u2013 something that US president Trump will probably describe as \u201cmaking a deal\u201d.<\/p>\n<p>Facing these threats, the EU and its NATO allies need to develop a system for coordinated intelligence-sharing, cyber defense, and the collaborative development of offensive capabilities. A valuable partner for this is Ukraine, which has extensive experience countering Russian cyber threats. Europe must impose stronger cyber sanctions on Russia, targeting major hacking groups like APT28, cutting off their funding, and working with tech companies to disrupt Russian cyber infrastructure by legally compelling these companies to cooperate (many of which are US based and have recently been made kneel before Trump) in order to sustain economic participation in the EU.<\/p>\n<p>With the U.S. effectively abandoning its cyber front against Russia, Europe stands at a turning point. The choice is clear: either step up and build a cyber force capable of countering Russian aggression or remain vulnerable to the unchecked rise of Moscow\u2019s digital warfare machine.<\/p>\n<p><strong>Disclaimer: Special thanks to my colleague Sam Forsythe for sharing his ideas and thoughts, which helped to improve this text. Your input was much appreciated.<\/strong><a href=\"#_ftnref2\" name=\"_ftn2\"><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In a major shift in U.S. cybersecurity policy, Defense Secretary Pete Hegseth has ordered U.S. Cyber Command to halt all planning against Russia, including offensive cyber operations. This policy change, made behind closed doors, represents a significant reversal of the approach taken under the Biden administration, which had identified Russia and China as the most significant intelligence threats to the United States. The decision aligns with the broader foreign policy direction of the Trump administration, which aims to \u201cde-escalate\u201d tensions with Russia, though it seems to be more of an appeasement. And this policy shift obviously comes at the expense of national and allied security, as has become frighteningly clear in recent days with the example of the \u2013 one can hardly call it anything else \u2013 \u2018blackmail\u2019 of Ukraine, which was temporarily denied military and intelligence support by the US.<\/p>\n","protected":false},"author":351,"featured_media":12260,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1125],"tags":[1161,1076,1162,1143],"coauthors":[1004],"class_list":["post-12486","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-english-en","tag-cybersecurity-en-2","tag-russia","tag-ukraine-en","tag-usa-en"],"acf":[],"views":4193,"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.1.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe - PRIF BLOG<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe - PRIF BLOG\" \/>\n<meta property=\"og:description\" content=\"In a major shift in U.S. cybersecurity policy, Defense Secretary Pete Hegseth has ordered U.S. Cyber Command to halt all planning against Russia, including offensive cyber operations. This policy change, made behind closed doors, represents a significant reversal of the approach taken under the Biden administration, which had identified Russia and China as the most significant intelligence threats to the United States. The decision aligns with the broader foreign policy direction of the Trump administration, which aims to \u201cde-escalate\u201d tensions with Russia, though it seems to be more of an appeasement. And this policy shift obviously comes at the expense of national and allied security, as has become frighteningly clear in recent days with the example of the \u2013 one can hardly call it anything else \u2013 \u2018blackmail\u2019 of Ukraine, which was temporarily denied military and intelligence support by the US.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/\" \/>\n<meta property=\"og:site_name\" content=\"PRIF BLOG\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HSFK.PRIF\" \/>\n<meta property=\"article:published_time\" content=\"2025-03-13T10:16:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1875\" \/>\n\t<meta property=\"og:image:height\" content=\"1025\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Thomas Reinhold\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@HSFK_PRIF\" \/>\n<meta name=\"twitter:site\" content=\"@HSFK_PRIF\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Thomas Reinhold\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/\"},\"author\":{\"name\":\"Thomas Reinhold\",\"@id\":\"https:\/\/blog.prif.org\/en\/#\/schema\/person\/1c65328a3b2cdfdaa9887961cd90974f\"},\"headline\":\"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe\",\"datePublished\":\"2025-03-13T10:16:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/\"},\"wordCount\":2086,\"publisher\":{\"@id\":\"https:\/\/blog.prif.org\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg\",\"keywords\":[\"Cybersecurity\",\"Russia\",\"Ukraine\",\"USA\"],\"articleSection\":[\"English\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/\",\"url\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/\",\"name\":\"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe - PRIF BLOG\",\"isPartOf\":{\"@id\":\"https:\/\/blog.prif.org\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg\",\"datePublished\":\"2025-03-13T10:16:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#primaryimage\",\"url\":\"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg\",\"contentUrl\":\"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg\",\"width\":1875,\"height\":1025,\"caption\":\"The order to halt all cyber operations against Russia marks a stark departure from the previous administration\u2019s cybersecurity strategy. | Photo: Ismail Enes Ayhan via Plattform Unsplash | Unsplash Lizenz\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\/\/blog.prif.org\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.prif.org\/en\/#website\",\"url\":\"https:\/\/blog.prif.org\/en\/\",\"name\":\"PRIF BLOG\",\"description\":\"Peace Research Institute Frankfurt \/ Leibniz Institut Hessische Stiftung Friedens- und Konfliktforschung\",\"publisher\":{\"@id\":\"https:\/\/blog.prif.org\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.prif.org\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blog.prif.org\/en\/#organization\",\"name\":\"Peace Research Institute Frankfurt \/ Leibniz Institut Hessische Stiftung Friedens- und Konfliktforschung\",\"url\":\"https:\/\/blog.prif.org\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.prif.org\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blog.prif.org\/wp-content\/uploads\/2023\/09\/cropped-blog_rgb.png\",\"contentUrl\":\"https:\/\/blog.prif.org\/wp-content\/uploads\/2023\/09\/cropped-blog_rgb.png\",\"width\":750,\"height\":226,\"caption\":\"Peace Research Institute Frankfurt \/ Leibniz Institut Hessische Stiftung Friedens- und Konfliktforschung\"},\"image\":{\"@id\":\"https:\/\/blog.prif.org\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/HSFK.PRIF\",\"https:\/\/x.com\/HSFK_PRIF\",\"https:\/\/www.linkedin.com\/company\/8912786\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.prif.org\/en\/#\/schema\/person\/1c65328a3b2cdfdaa9887961cd90974f\",\"name\":\"Thomas Reinhold\",\"description\":\"Dr. Thomas Reinhold ist wissenschaftlicher Mitarbeiter am Programmbereich Internationale Sicherheit und im CNTR-Projekt. Er forscht zur Militarisierung des Cyberspace, KI und M\u00f6glichkeiten zur R\u00fcstungsbegrenzung, -kontrolle und Abr\u00fcstung dieser Technologien. \/\/ Dr Thomas Reinhold is a Researcher at the Research Department International Security and in the CNTR project. He conducts research on the militarization of cyberspace, AI and possibilities for arms control and disarmament of these technologies.\",\"url\":\"https:\/\/blog.prif.org\/en\/author\/treinhold\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe - PRIF BLOG","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/","og_locale":"en_US","og_type":"article","og_title":"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe - PRIF BLOG","og_description":"In a major shift in U.S. cybersecurity policy, Defense Secretary Pete Hegseth has ordered U.S. Cyber Command to halt all planning against Russia, including offensive cyber operations. This policy change, made behind closed doors, represents a significant reversal of the approach taken under the Biden administration, which had identified Russia and China as the most significant intelligence threats to the United States. The decision aligns with the broader foreign policy direction of the Trump administration, which aims to \u201cde-escalate\u201d tensions with Russia, though it seems to be more of an appeasement. And this policy shift obviously comes at the expense of national and allied security, as has become frighteningly clear in recent days with the example of the \u2013 one can hardly call it anything else \u2013 \u2018blackmail\u2019 of Ukraine, which was temporarily denied military and intelligence support by the US.","og_url":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/","og_site_name":"PRIF BLOG","article_publisher":"https:\/\/www.facebook.com\/HSFK.PRIF","article_published_time":"2025-03-13T10:16:00+00:00","og_image":[{"width":1875,"height":1025,"url":"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg","type":"image\/jpeg"}],"author":"Thomas Reinhold","twitter_card":"summary_large_image","twitter_creator":"@HSFK_PRIF","twitter_site":"@HSFK_PRIF","twitter_misc":{"Written by":"Thomas Reinhold","Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#article","isPartOf":{"@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/"},"author":{"name":"Thomas Reinhold","@id":"https:\/\/blog.prif.org\/en\/#\/schema\/person\/1c65328a3b2cdfdaa9887961cd90974f"},"headline":"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe","datePublished":"2025-03-13T10:16:00+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/"},"wordCount":2086,"publisher":{"@id":"https:\/\/blog.prif.org\/en\/#organization"},"image":{"@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg","keywords":["Cybersecurity","Russia","Ukraine","USA"],"articleSection":["English"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/","url":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/","name":"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe - PRIF BLOG","isPartOf":{"@id":"https:\/\/blog.prif.org\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#primaryimage"},"image":{"@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg","datePublished":"2025-03-13T10:16:00+00:00","breadcrumb":{"@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#primaryimage","url":"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg","contentUrl":"https:\/\/blog.prif.org\/wp-content\/uploads\/2025\/03\/ismail-enes-ayhan-lVZjvw-u9V8-unsplash1.jpg","width":1875,"height":1025,"caption":"The order to halt all cyber operations against Russia marks a stark departure from the previous administration\u2019s cybersecurity strategy. | Photo: Ismail Enes Ayhan via Plattform Unsplash | Unsplash Lizenz"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.prif.org\/en\/2025\/03\/13\/us-halts-defensive-cyber-activities-against-russia-a-digital-withdrawal-from-europe\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/blog.prif.org\/en\/"},{"@type":"ListItem","position":2,"name":"US Halts Defensive Cyber Activities Against Russia: A Digital \u2018Withdrawal\u2019 from Europe"}]},{"@type":"WebSite","@id":"https:\/\/blog.prif.org\/en\/#website","url":"https:\/\/blog.prif.org\/en\/","name":"PRIF BLOG","description":"Peace Research Institute Frankfurt \/ Leibniz Institut Hessische Stiftung Friedens- und Konfliktforschung","publisher":{"@id":"https:\/\/blog.prif.org\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.prif.org\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/blog.prif.org\/en\/#organization","name":"Peace Research Institute Frankfurt \/ Leibniz Institut Hessische Stiftung Friedens- und Konfliktforschung","url":"https:\/\/blog.prif.org\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.prif.org\/en\/#\/schema\/logo\/image\/","url":"https:\/\/blog.prif.org\/wp-content\/uploads\/2023\/09\/cropped-blog_rgb.png","contentUrl":"https:\/\/blog.prif.org\/wp-content\/uploads\/2023\/09\/cropped-blog_rgb.png","width":750,"height":226,"caption":"Peace Research Institute Frankfurt \/ Leibniz Institut Hessische Stiftung Friedens- und Konfliktforschung"},"image":{"@id":"https:\/\/blog.prif.org\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/HSFK.PRIF","https:\/\/x.com\/HSFK_PRIF","https:\/\/www.linkedin.com\/company\/8912786\/"]},{"@type":"Person","@id":"https:\/\/blog.prif.org\/en\/#\/schema\/person\/1c65328a3b2cdfdaa9887961cd90974f","name":"Thomas Reinhold","description":"Dr. Thomas Reinhold ist wissenschaftlicher Mitarbeiter am Programmbereich Internationale Sicherheit und im CNTR-Projekt. Er forscht zur Militarisierung des Cyberspace, KI und M\u00f6glichkeiten zur R\u00fcstungsbegrenzung, -kontrolle und Abr\u00fcstung dieser Technologien. \/\/ Dr Thomas Reinhold is a Researcher at the Research Department International Security and in the CNTR project. He conducts research on the militarization of cyberspace, AI and possibilities for arms control and disarmament of these technologies.","url":"https:\/\/blog.prif.org\/en\/author\/treinhold\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/posts\/12486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/users\/351"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/comments?post=12486"}],"version-history":[{"count":0,"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/posts\/12486\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/media\/12260"}],"wp:attachment":[{"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/media?parent=12486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/categories?post=12486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/tags?post=12486"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.prif.org\/en\/wp-json\/wp\/v2\/coauthors?post=12486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}