Executivegov iconExecutivegovSep 10, 2026 ~7 min source read

FBI Unveils Four-Pillar Cyber Strategy to Guide Cyber Division Operations

The FBI’s Cyber Division released a strategy that organizes its work around disrupting adversaries, supporting victims, expanding partnerships, and strengthening technical and workforce capabilities.

FBI Releases Four-Pillar Cyber Strategy

Share this story

Send the public story page.

Useful takeaways from this story.

Four pillars structure the FBI Cyber Division’s approach: disrupt adversaries, support victims, increase partnerships, and build cyber capabilities.

The bureau plans targeted workforce development, new investigative tools, and adoption of AI under human review to speed triage and malware analysis.

Strategy ties to recent operations: joint warnings on foreign AI-based campaigns and enforcement actions such as domain seizures linked to China-associated groups.

# What the strategy says

Division's work defending U.S. networks and critical infrastructure. It is organized into four pillars that define priorities and specific objectives the bureau will pursue.

# The four pillars, in plain terms

  • Investigate, disrupt and impose cost on cyber adversaries: Focuses on identifying intrusions, attributing activity to actors, and taking action to disrupt or impose consequences on those who target U.S. networks and infrastructure.
  • Support victims: Emphasizes rapid sharing of threat intelligence, early engagement with organizations hit by incidents, and delivery of specialized resources to help recovery.
  • Increase impact through partnerships: Seeks closer coordination across federal agencies, international allies, and private industry to extend the bureau's reach and effectiveness.
  • Enhance FBI cyber capabilities: Targets hiring and retention, expanded training, new technical tools and the controlled use of AI to scale investigative work.

# What the FBI will actually change

Assistant Director Brett Leatherman summarized the approach: "That mission does not change. How we meet the threat must." He framed the threat as a mix of nation-state actors positioning inside networks and criminal groups targeting shared services, with both increasingly using AI to move faster.

# How the strategy connects to recent FBI work

The strategy aligns with operational steps the FBI has already taken. Examples cited include joint public warnings with the NSA and CISA about China-linked AI distillation campaigns targeting U.S. frontier models, and collaboration with the Department of Justice to seize domains tied to the China-linked QTFY hacking group. The bureau also updated a joint advisory with CISA and EPA on Iranian cyber actors targeting critical infrastructure and coordinated public alerts with CISA about Russian activity.

# Events and leadership visibility

Matthew Fodor (also listed as Matt Fodor), operations director for the FBI's National Security Branch, will deliver a keynote at the Potomac Officers Club's 2026 Intel Summit. The event will cover AI's role in intelligence, OSINT, agentic AI and quantum risk, and cybersecurity considerations in the agentic AI era.

# Immediate implications for partners and defenders

  • Private-sector organizations should expect continued emphasis on rapid information sharing and coordinated incident response with the FBI.
  • Federal and international partners will be central to planned disruption efforts, expanding operational reach through joint actions and advisories.
  • Cyber professionals may see more hiring and training opportunities tied to FBI programs and an increased role for AI tools in investigations—subject to human oversight.

# Bottom line

The FBI's new strategy sets a structured perimeter around how the bureau will investigate, assist victims, coordinate with partners, and invest in people and tools. It links those priorities to concrete objectives—staffing, training, technology upgrades and AI adoption—and reflects actions the FBI has already taken in public warnings and enforcement operations.

More context around this story.

Loading more related stories...

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app