Hegseth Directs Cyber Command and Intelligence to Focus on Election Security
Defense Secretary Pete Hegseth has instructed U.S. Cyber Command and military intelligence agencies to prioritize efforts aimed at countering foreign threats to the upcoming elections. This directive, outlined in a memorandum dated September 22, was made public on Monday and emphasizes the importance of intelligence collection and coordination with the Department of Homeland Security.
In the memo, Hegseth calls for the defense intelligence enterprise to gather and analyze information regarding foreign election threats. He has also directed Cyber Command to utilize its existing authorities and capabilities to counter potential cyberattacks by foreign actors targeting the elections. Hegseth stated, "I am therefore directing the entire Defense Intelligence Enterprise to mobilize every authorized asset, capability, and partnership under your command to defend our election infrastructure from foreign malign influence."
The memorandum is addressed to leaders of key agencies, including Cyber Command, the National Security Agency, the Defense Intelligence Agency, and the National Geospatial-Intelligence Agency. Hegseth has labeled the protection of elections as a "no-fail mission," although the memo does not specify particular adversaries, additional staffing, funding, or implementation deadlines.
This directive comes at a time when the federal government has been scaling back its dedicated efforts to track foreign influence and disinformation. The Trump administration has dismantled the FBI's Foreign Influence Task Force and reorganized the intelligence community's coordination in this area, leading to reduced election security support at the Cybersecurity and Infrastructure Security Agency.
At the Office of the Director of National Intelligence, responsibilities of the Foreign Malign Influence Center have been reassigned to other offices, with two officials now tasked with coordinating election threat intelligence. Foreign election threats can encompass a range of activities, from attacks on voting-related computer systems to campaigns aimed at manipulating public opinion.
Role of NSA and Cyber Command in Elections
The NSA plays a crucial role in collecting foreign signals intelligence, including intercepted communications, to understand adversaries' plans and capabilities while also assisting in the protection of sensitive U.S. systems. Cyber Command is responsible for conducting military cyber operations, including missions designed to disrupt foreign hackers and their infrastructure.
Historically, these agencies have collaborated through a joint Election Security Group. During the 2022 midterms, the NSA indicated that intelligence regarding attacks originating from abroad could be shared with domestic agencies to bolster their defenses, while Cyber Command could engage in offensive operations to disrupt foreign attackers. Hegseth's memo does not clarify whether this organizational model will be employed in the upcoming elections.
Intelligence Reviewed
The directive also underscores the necessity for cooperation with the Department of Homeland Security, particularly as that agency's civilian cyber defense division outlines its support for election officials following staffing and program reductions. Just two days after Hegseth signed the memo, CISA released an election security plan that identifies its ten regional directors as election security advisers and describes a free threat-sharing platform connecting election officials, state intelligence hubs, and federal partners. This plan follows warnings from state officials that previous cuts had diminished their access to federal security expertise.
As the 2026 elections approach, rapid advancements in artificial intelligence are enabling foreign influence operators to automate more of their activities. Such capabilities could allow adversaries to conduct larger campaigns with fewer personnel, complicating efforts to identify coordinated manipulation ahead of the midterms.
