iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Kevin Mandia said in 2023 that China had displaced Russia as the top cyber threat, citing China’s improving operational security, tools and hacker training. That was his expert judgment at the time—not a formal U.S. government ranking or a shared, scored comparison. The 2026 U.S. Intelligence Community assessment names China and Russia as its most persistent and active cyber threats without placing either above the other.
What Mandia said about China and Russia
At the Google Public Sector Forum, CyberScoop reported on October 17, 2023, that Kevin Mandia, then CEO of Mandiant, viewed China as having overtaken Russia. He said Russia had been the apex threat from roughly 2004 through 2019, while China had since improved its operational security, tools and hacker training. Mandia described China as an innovator and called it “the one apex attacker in cyberspace.” CyberScoop’s report attributes that assessment to Mandia; it does not establish an independently measured ranking.
His comparison concerned offensive capability and operational development. It should be read as a dated assessment, not as a timeless claim that every measure of cyber risk puts China ahead of Russia.
Does current U.S. intelligence rank China above Russia?
No. The 2026 Annual Threat Assessment says, “The IC assesses that China and Russia present the most persistent and active threats and are continuing their R&D efforts.” The statement, in DNI Tulsi Gabbard’s opening remarks, identifies both countries but does not rank one first. Read the 2026 assessment opening statement.
#1 Best Overall
The distinction matters: persistence and activity are the assessment’s stated criteria, while Mandia’s 2023 comments focused on offensive capability and operational development. The sources provide no common scoring method that would make those judgments directly comparable or establish a single, objectively measured “top” threat.
What later comments add—and what they do not
Mandia’s 2025 comment on Chinese aggression
At the RSAC Conference in 2025, Mandia said, as reported by IT Pro, “China’s almost doubled their aggression in cyber because there’s no agreed upon rules of engagement.” This was a separate observation about Chinese aggression, not a fresh China-versus-Russia ranking. IT Pro’s May 1, 2025 report covers the conference remarks.
Mandia’s 2026 comparison involving Iran
In a CNN interview on March 10, 2026, Mandia said Iran was “decades behind what China can do, decades behind what Russia can do.” The comparison was Iran against both countries; he did not rank China against Russia in that interview. CNN’s interview transcript provides that context.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsHow to interpret the headline
- As a 2023 attribution: It accurately captures Mandia’s reported judgment that China had displaced Russia in his view.
- As a current official ranking: It goes beyond the evidence. The 2026 U.S. assessment groups China and Russia together among its most persistent and active cyber threats.
- As a universal comparison: It is not established. The sources use different criteria and offer no shared score for deciding which country is the single greatest cyber threat.
The historical context also cuts both ways: a 2026 CyberWire page recounts Mandia’s 2016 remarks that Russian intrusions then exceeded Chinese intrusions. Those were comments from 2016, not a new assessment made when the page was published. CyberWire’s recap is useful as historical contrast, not as a current ranking.
Quick Recap
Best Value
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
