IC Technology & Cyber — 2026-09-12

FBI Unveils Cyber Strategy as State-Backed Actors Target Critical Infrastructure and Ransomware Threats Escalate

BLUFFBI's new cyber strategy hinges on private-sector breach reporting that its own leadership concedes is declining, leaving the doctrine's operational tempo aspirations without a reliable intelligence feed.

The FBI released a Cyber Strategy on September 9 outlining four pillars: investigating and disrupting cyber adversaries, supporting victims, expanding partnerships, and building internal capabilities 1. The document states that state-sponsored actors are pre-positioning on U.S. critical infrastructure while ransomware groups operate within an increasingly professionalized ecosystem amplified by AI-enabled tools 2. Brett Leatherman, assistant director of the FBI's Cyber Division, told reporters at the Billington Cybersecurity Summit that the strategy aims to move disruption operations from an "ad-hoc" approach to a "steady state," citing recent takedowns of a Russian GRU router botnet, Chinese-linked infrastructure, and the AlphV ransomware gang 3. Leatherman also said companies have grown more hesitant to share breach information with the bureau, attributing this partly to uncertainty about the FBI's value in cyber and concern over regulatory disclosure, and said the FBI now shares threat intelligence with victims "until it hurts" 3.

Analysis
The strategy formalizes ad-hoc disruption operations into a standing posture, signaling sustained, higher-frequency takedowns against state-backed pre-positioning and ransomware infrastructure rather than periodic set-piece operations. Sourcing rests on the FBI's own document, corroborated independently by two trade outlets drawing on the primary text without contradicting one another, yielding high convergence but limited outside verification. Its pillars depend on private-sector reporting, yet Leatherman's own admission that companies have grown warier of sharing breach data, partly over regulatory-disclosure fears, exposes a gap between the strategy's ambition and the intelligence pipeline it requires. The "share until it hurts" posture aims to rebuild that trust. The document itself may function primarily as a confidence-building messaging exercise for reluctant corporate victims rather than proof of expanded operational capability, and whether field offices convert the doctrine into measurable tempo is genuinely uncertain.

3 sources

FBI Cyber Strategy - Federal Bureau of Investigation
FBI unveils Cyber Strategy as state-backed actors target critical infrastructure and ransomware threats escalate - Industrial Cyber
New FBI cyber strategy promises increase in adversary disruptions - Cybersecurity Dive