Activities, other than those authorized by or in accordance with U.S. law, that seek to compromise or impair the confidentiality, integrity, or availability of computers, information or communication systems, networks, physical or virtual infrastructure controlled by computers of information systems, or information resident thereon.
Sources:
CNSSI 4009-2022
from
NSA/CSS Policy 11-11