; or and inserting a semicolon; (2) in paragraph (7), by striking the period at the end and inserting ; or ; and (3) by adding at the end the following new paragraph: (8) an entity not substantially composed of United States persons that is engaged in international malicious cyber activity, or activities in preparation therefor, that threatens the national defense or security of the United States. . (b) Agent of a foreign power Subsection (b)(1) of such section ( 50 U.S.C. 1801 ) is amended— (1) in subparagraph (D), by striking ; or and inserting a semicolon; and (2) by adding at the end the following new subparagraph: (F) engages in international malicious cyber activity that threatens the national defense or security of the United States, or activities in preparation therefor, for or on behalf of a foreign power, or knowingly aids or abets any person in the conduct of such international malicious cyber activity or activities in preparation therefor, or knowingly conspires with any person to engage in such international malicious cyber activity or activities in preparation therefor; or . (c) International malicious cyber activity defined Such section ( 50 U.S.C. 1801 ) is further amended by adding at the end the following new subsection: (q) The term international malicious cyber activity means activity on or through an information system (as defined by section 102 of the Cybersecurity Information Sharing Act of 2015 ( 6 U.S.C. 1501 ))— (1) originating from, or directed by persons located, in whole or in substantial part, outside the United States; (2) that seeks to compromise or impair the confidentiality, integrity, or availability of computers, information systems or communications systems, networks, physical or virtual infrastructure controlled by computers or information systems, or information resident thereon