As online attacks grow in volume and sophistication, the United States is expanding its cybersecurity efforts. Cybercriminals continue to develop new ways to ensnare victims, whereas nation-state hackers compromise companies, government agencies, and businesses to create espionage networks and steal information. Threats come from both criminals and hostile countries, especially China, Russia, Iran, and North Korea. Much is written on this topic, and this CRS report directs the reader to authoritative sources that address many of the most prominent issues. The annotated descriptions of these sources are listed in reverse chronological order, with an emphasis on material published in the past several years. This report includes resources and studies from government agencies (federal, state, local, and international), think tanks, academic institutions, news organizations, and other sources: Table 1 —cybercrime, data breaches and security, including hacking, real-time attack maps, and statistics (such as economic estimates) Table 2 —national security, cyber espionage, and cyberwar, including Stuxnet, China, and the Dark Web Table 3 — the Internet of Things (IoT), smart cities, cloud computing, and FedRAMP

Summary: As online attacks grow in volume and sophistication, the United States is expanding its cybersecurity efforts. Cybercriminals continue to develop new ways to ensnare victims, whereas nation-state hackers compromise companies, government agencies, and businesses to create espionage networks and steal information. Threats come from both criminals and hostile countries, especially China, Russia, Iran, and North Korea. Much is written on this topic, and this CRS report directs the reader to authoritative sources that address many of the most prominent issues. The annotated descriptions of these sources are listed in reverse chronological order, with an emphasis on material published in the past several years. This report includes resources and studies from government agencies (federal, state, local, and international), think tanks, academic institutions, news organizations, and other sources: Table 1—cybercrime, data breaches and security, including hacking, real-time attack maps, and statistics (such as economic estimates) Table 2—national security, cyber espionage, and cyberwar, including Stuxnet, China, and the Dark Web Table 3—, The Internet of Things (IoT), smart cites, cloud computing, and FedRAMP The following reports comprise a series of authoritative reports and resources on these additional cybersecurity topics: CRS Report R44405, Cybersecurity: Overview Reports and Links to Government, News, and Related Resources, by Rita Tehan. CRS Report R44406, Cybersecurity: Education, Training, and R&D Authoritative Reports and Resources, by Rita Tehan. CRS Report R44408, Cybersecurity: Cybercrime and National Security Authoritative Reports and Resources, by Rita Tehan. CRS Report R44410, Cybersecurity: Critical Infrastructure Authoritative Reports and Resources, by Rita Tehan. CRS Report R44417, Cybersecurity: State, Local, and International Authoritative Reports and Resources, by Rita Tehan. CRS Report R44427, Cybersecurity: Federal Government Authoritative Reports and Resources, by Rita Tehan. CRS Report R43317, Cybersecurity: Legislation, Hearings, and Executive Branch Documents, by Rita Tehan. CRS Report R43310, Cybersecurity: Data, Statistics, and Glossaries, by Rita Tehan.