White House authorizes vetted private firms to conduct offensive cyber missions
The administration issued a presidential memorandum permitting selected private companies to carry out offensive cyber actions against foreign criminal groups and hackers.
A presidential memorandum released by the Trump administration authorizes vetted private companies to launch offensive cyber operations against international criminal gangs and hostile hackers. The arrangement allows these firms to gather intelligence with tools like spyware and to execute disruptive strikes aimed at erasing attackers' data or networks, but only after approval from Justice Department and Homeland Security officials.
Companies must place a $1 million escrow that can be forfeited for non-compliance, and they will be required to notify the government of imminent threats to critical U.S. infrastructure. The memorandum promises detailed guidance within the next two months, covering firms of all sizes while ensuring no attacks target Americans or U.S. systems. Critics warn the move could spark legal challenges and diplomatic fallout, and raise concerns about U.S. citizens being treated as combatants abroad. The policy arrives amid rising ransomware incidents, water-system intrusions attributed to Iranian actors, and a wave of AI-driven cyber threats.
Why it matters
It expands U.S. cyber power by letting private firms act offensively, reshaping legal norms and raising security and diplomatic risks.
In this story