Escalation: Trump Authorizes Private Cyber Operations
President Donald Trump signed a national security presidential memorandum authorizing vetted U.S. private companies to carry out cyber operations against overseas cybercriminals, under federal direction and oversight.
The move opens a government-run program for selected firms to conduct what is commonly called hack back — breaking into or disrupting systems used by attackers — a tactic the private sector has long been barred from using on its own.
The authority is aimed at foreign-based criminal networks and other transnational criminal organizations, not domestic targets or foreign governments. Operations are to be conducted outside the United States and only when tasked by federal agencies.
Companies admitted to the program must be vetted and monitored, with government-set rules of engagement and reporting requirements. The goal is to expand capacity to disrupt ransomware crews, data-theft rings, and their supporting infrastructure abroad.
This is a first for U.S. cyber policy, giving private firms a formal offensive role alongside the government. Next, agencies will stand up the vetting process and issue guidance defining eligible firms, permissible targets, and oversight mechanisms.
Synthesized from 17 sources
New York TimesCNNArs TechnicaThe GuardianNextgovPoliticoTechCrunchSecurityboulevardThe HillHelpnetsecurityCybersecuritydiveTheregisterCyberscoopExecutivegovHstodayBloombergBreakingdefense
AI-synthesized from multiple reported sources
In the app
Read this update in Frameshift
Four stories are free on the web. The full Vault, with every timeline and brief, is in the app.