FBI

An FBI official told CyberTalks 2026 in February that Salt Typhoon's compromise of telecoms infrastructure was "still very, very much ongoing," confirming at least 200 companies across 80 countries affected as of August 2025. The FBI co-issued attribution-backed advisory PSA260407 with NCSC and partnered with Michigan State Police and German Federal Criminal Police to seize Cryptocurrency exchange E-Note, charging Russian national Mykhalio Petrovich Chudnovets with laundering more than $70m in ransomware proceeds.

The Federal Bureau of Investigation serves as the principal federal agency for domestic intelligence, counterterrorism and complex cybercrime investigations in the United States. Its Cyber Division leads Major ransomware takedowns, attribution actions and joint advisories with CISA, NCSC and other national agencies. The FBI Internet Crime Complaint Center (IC3) issues public service announcements on emerging threat campaigns including the APT28 DNS hijacking advisory.

The FBI's cyber obligations are proposed for a further $560m cut under the Trump FY27 budget, affecting roughly 1,900 staff across cyber and adjacent portfolios. Against the backdrop of growing KEV deadlines, Salt Typhoon confirmation and ongoing LockBit5 and DragonForce ransomware activity, the proposed staffing reduction is a structural tension the FBI and Congress will need to resolve.