Cyber Deterrence and Response Act of 2025

This legislation, known as the "Cyber Deterrence and Response Act of 2025," aims to counter malicious state-sponsored cyber activities by establishing a framework for designating and sanctioning critical cyber threat actors. The President, acting through the National Cyber Director, will designate foreign persons or state instrumentalities found responsible for or complicit in cyber activities that significantly threaten U.S. national security, foreign policy, or economic health. These activities include disrupting critical infrastructure, misappropriating funds or data for commercial gain, destabilizing financial or energy sectors, or interfering with election processes. A key provision requires the establishment of a National Attribution Framework within 180 days of enactment. This framework will define uniform, criteria-based processes for attributing state-sponsored cyber activities, setting technical and evidentiary standards, and assigning confidence levels to attributions. It also mandates coordination with allied countries for information sharing and consistent public attribution statements, while ensuring consistency with existing U.S. cyber incident response policies. Upon designation, a range of mandatory sanctions will be imposed. These include the withdrawal or suspension of U.S. development and security assistance, opposition to international financial institution loans, and prohibitions on U.S. government procurement from designated entities. Additionally, the bill restricts the purchase of publicly traded securities, terminates arms sales, and imposes comprehensive export control restrictions on goods, technology, and services involving the designated actors. Beyond financial and trade penalties, designated critical cyber threat actors will face travel-related sanctions , rendering them inadmissible to the United States and leading to the revocation of any existing visas. The President also gains authority to impose additional sanctions on the governments of countries that have aided or directed these designated cyber threat actors, including further assistance withdrawals and export bans on defense articles, intrusion software, and surveillance systems. The bill emphasizes coordination with U.S. allies and partners to deter cyber threats and respond collectively to state-sponsored cyber activities. It includes mandatory exemptions for U.S. intelligence activities and allows for case-by-case waivers of sanctions for national interest, law enforcement, or humanitarian purposes. Provisions are also made for the removal of sanctions and designations if the offending conduct verifiably ceases.