FCC ‘rip and replace’ provision for Chinese tech tops cyber provisions in defense bill

The FY2025 NDAA allocates $3B to the FCC’s “rip and replace” program to remove insecure Chinese telecom equipment amid concerns raised by Volt Typhoon and Salt Typhoon activity, while also elevating JFHQ-DODIN under U.S. Cyber Command, ordering a third-party study on a potential Cyber Force, and launching quarterly DoD hackathons. The act incorporates the annual intelligence bill without a FISA Section 702 fix and directs the designation of major ransomware threats (e.g., LockBit, Conti, REvil) as hostile foreign cyber actors.