Malicious state and non-state actors use cyberattacks for extortion, information warfare, disinformation, and more. Such attacks have the capability to harm large numbers of people and institutions with comparatively minimal investment and a troubling degree of deniability. These attacks can undermine faith and confidence in democratic institutions and the global economic system.
Many countries now view cyber capabilities as tools for projecting inf luence, and some use cyber tools to protect and extend their autocratic regimes. Cyberattacks have become a key feature of modern conflict.
The United States will deter, defend, and when necessary defeat malicious actors who use cyberspace capabilities against the United States. When faced with the opportunity to take action against malicious actors in cyberspace, the United States will be risk informed, but not risk averse, in considering our options.