Pentagon gets new legal authority for offensive cyber operations
S. 2602 — A bill to amend title 10, United States Code, to expand the scope of affirmation of authority for cyber operations to include defense of critical infrastructure of the Department of Defense, and for other purposes. · Filed by Mike Rounds (R-SD) · Introduced Jul 31, 2025 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill amends federal law to authorize the Department of Defense to conduct offensive cyber operations to defend its own critical infrastructure—computer systems, networks, and facilities essential to military operations. Previously, DoD cyber authority was limited to force protection; this expands it to include infrastructure defense, and defines 'critical infrastructure' as assets whose loss would severely degrade military capability.
Why we flagged it
The bill's sole function is to expand the legal scope of DoD cyber operations authority. It is a straightforward amendment to existing military law, not a rider or concealed provision.
What the text implies
- The definition of 'critical infrastructure' is not limited to purely military systems—it could encompass dual-use infrastructure (power grids, communications networks) that serves both DoD and civilian populations, potentially authorizing offensive cyber operations affecting civilians.
- The bill does not establish new congressional notification, reporting, or approval requirements for cyber operations under the expanded authority, leaving oversight to executive discretion.
- Offensive cyber operations conducted under this authority may target foreign infrastructure or actors, potentially escalating cyber conflict without explicit congressional authorization for each operation.
- The phrase 'for other purposes' in the bill's title is boilerplate, but the amendment itself is narrow and complete—no hidden riders detected.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
Citizens benefit from stronger defense of military infrastructure against cyber attack, reducing risk of operational failure or breach. However, the bill grants broad new offensive cyber authority to the executive branch with minimal new oversight or transparency requirements, and the definition of 'critical infrastructure' is expansive enough to potentially encompass systems with civilian impact.
Who stands to gain
- defense contractors specializing in cyber defense and offensive cyber capabilities
- military technology vendors
Named in the bill
Department of Defense, Armed Forces, 10 U.S.C. § 394, Senate Committee on Armed Services
Where it stands
- Jul 31, 2025 — Introduced · Congress.gov: “Introduced in Senate”
- Jul 31, 2025 — Referred to Senate Committee on Armed Services · Congress.gov: “Read twice and referred to the Committee on Armed Services”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
1 lobbying clients named this bill on 1 disclosure filings across 1 quarter, Dec 2025 to Dec 2025. Those filings disclosed $290,000 in lobbying spend. A filing names 89 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 0% of bills with at least one filing.
Mike Rounds, the sponsor, reported $1,681,790 in PAC receipts in the 2026 cycle.
- Fdd Action — $290,000 on 1 filing
Lobbying Disclosure Act filings through Jan 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (976 characters) on May 21, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Dec 2025 to Dec 2025. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jan 20, 2026 · page rendered 2026-10-20.
“Pentagon gets new legal authority for offensive cyber operations” QuorumCivic. https://share.quorumcivic.app/bill/119/s2602 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.