With all the recent progress on asset forfeiture, this seems like a huge leap backwards. Essentially any foreigner can be accused of a crime, have their assets

With all the recent progress on asset forfeiture, this seems like a huge leap backwards. Essentially any foreigner can be accused of a crime, have their assets within US institutions stolen, and then has to prove they're innocent to get them returned (assuming they can). Plus "cyber attacks" is such a broad brush. One that has been used against people who access unsecured URLs which aren't meant to be known (essentially security through obscurity). It may also make security research abroad against US-based organisations impossible. Most of the bug bounty programs are now extremely high risk.