The Senate voted 71-29 on Monday to confirm Gen. Joshua Rudd as the new leader of the National Security Agency and U.S. Cyber Command, elevating him to the rank of four-star general and ending a year without Senate-confirmed leadership at two of America's most critical national security institutions.
Rudd will also serve as the "dual-hat" leader of U.S. Cyber Command, placing both the nation's premier signals intelligence agency and its offensive cyber warfare arm under a single commander, the Washington Examiner reported.
The confirmation comes as the Trump administration leans into an offensive cybersecurity strategy at a moment when the threats demand exactly that kind of posture.
Rudd's background is not the typical path to the NSA directorship, and that may be precisely the point. He started as a logistician before transferring to Special Forces and becoming a leader of the elite Delta Force. For the past six years, he served as deputy director of the U.S. Indo-Pacific Command, where he was responsible for defending against the Chinese military's regional encroachments.
That last detail matters more than anything on a cybersecurity checklist. The Indo-Pacific theater is where America's most sophisticated adversary operates. China's military cyber capabilities aren't theoretical. They're active, persistent, and aimed at the same networks and systems Rudd will now be charged with defending and, when necessary, attacking.
Sen. Tom Cotton, chairman of the Senate Intelligence Committee, praised Rudd and made clear that the delay in confirming him was the real security risk. Cotton wrote on X:
"General Rudd is a war hero with a lifetime of service to our nation."
"Instead of gambling with the lives of our troops and the safety of the homeland, Senate Democrats should have confirmed his nomination weeks ago."
Cotton's frustration is well-placed. Every week these agencies operated without confirmed leadership was a week America's adversaries could exploit the uncertainty.
Sen. Ron Wyden, a top-ranking Democrat on the Senate Intelligence Committee, blocked the possibility of a Senate voice vote last month, forcing a roll call vote for Rudd's confirmation. Wyden pushed back earlier this year, citing Rudd's inexperience in cybersecurity and raising concerns about his understanding of NSA surveillance authorities and limitations.
"When it comes to the cybersecurity of this country, there is simply no time for on-the-job learning. The threat is just too urgent for that."
The irony is thick. Wyden argued the threat was too urgent to confirm someone who might need time to learn, so his solution was to delay the confirmation for weeks, leaving the agencies with no Senate-confirmed leader at all. If the threat is as urgent as Wyden claims, then an empty chair is worse than a decorated general with six years of experience countering America's most dangerous near-peer adversary.
Wyden also wrote in a letter submitted to the Congressional Record that "the potential for abuse is enormous," signaling his real concern: that the NSA under new leadership might be used more aggressively. Democrats spent years warning about cyber threats from China and Russia. Now that an administration is actually moving toward an offensive cyber posture, the concern suddenly shifts to "abuse." The goalposts don't just move; they sprint.
Rudd's confirmation arrives at a moment when the administration is clearly signaling that America's cyber capabilities are not just defensive tools. The president has suggested that cyberattacks were used in the capture of Venezuelan dictator Nicolas Maduro and the strikes on Iranian nuclear facilities last year. Whether or not those specific claims are confirmed in detail, the message is unmistakable: cyber operations are being integrated into the broader projection of American power.
That's a significant shift. For years, the debate over cyber strategy was trapped in a defensive crouch, focused on protecting networks and responding to breaches after the damage was done. An offensive posture treats cyber capabilities the way the military treats every other domain: as something you use to impose costs on adversaries, not just absorb them.
Rudd himself, during his confirmation process, laid out his priorities plainly:
"With this committee's support, my focus will be to lead the NSA in its vital foreign intelligence mission, driven by the pursuit of innovation and an unwavering commitment to unbiased, objective analysis."
Foreign intelligence mission. Innovation. Objective analysis. No bureaucratic hedging, no apology tour. That's the tone of someone who understands the job isn't to manage a think tank. It's to run an intelligence agency in wartime conditions.
The NSA and Cyber Command have been without Senate-confirmed leadership since April, when President Trump fired former NSA Director Tim Haugh over allegations that he was not loyal to the administration. Whatever the specifics of that situation, the result was a prolonged vacancy at agencies that cannot afford one.
The 71-29 vote tells its own story. This was not a party-line squeaker. A significant number of senators on both sides of the aisle recognized that Rudd was qualified and that the delay had gone on long enough. Wyden's attempt to turn the confirmation into a referendum on surveillance policy failed to persuade even many of his own colleagues.
America's cyber adversaries do not wait for the Senate to finish its procedural games. China, Russia, Iran, and a growing list of non-state actors probe American networks daily. They test infrastructure, steal intellectual property, and lay the groundwork for operations that could cripple critical systems in a conflict.
Now there's a confirmed commander with Special Forces experience and six years staring down the Chinese military in the Indo-Pacific. The chair is filled. The mission is clear.