● Covered by 8 sources · 8 reportsMedium impact8 neutral
White House Authorizes Private Firms for Offensive Cyber Operations Against Foreign Cybercrime
Key points
- Presidential memorandum authorizes private companies for offensive cyber operations.
- Operations target foreign cyber-enabled transnational criminal organizations.
- Program is managed by the National Coordination Center under federal oversight.
- Participating companies must be vetted and sign contracts with DOJ or DHS.
- Operations require advance approval and cannot cause loss of life or armed attack.
- Operations can destroy data and systems.
- Participating firms must post a $1 million escrow.
- President Donald Trump signed the memorandum on August 12.
- The policy reverses previous administration statements ruling out private offensive actions.
- Thomas Lind and Sean Cairncross previously stated no plans for private offensive operations.
- Memorandum authorizes "Cyber Surveillance Operations" for intelligence collection.
New Policy for Cyber Operations
A presidential memorandum signed by U.S. President Donald Trump on Wednesday establishes a program that permits vetted private U.S. companies to conduct offensive and intelligence-gathering cyber operations. These operations will be carried out under direct federal control and oversight, targeting foreign cyber-enabled transnational criminal organizations (TCOs).
Program Management and Oversight
The program is managed by the National Coordination Center (NCC), which operates under the Homeland Security Task Force. Co-executive directors designated by the Attorney General and the Secretary of Homeland Security will ensure all operational actions remain under federal supervision. The Department of Justice (DOJ) and the Department of Homeland Security (DHS) will oversee the private firms involved.
Scope of Operations and Targets
Participating companies are authorized to execute 'cyber surveillance operations' and 'cyber effects operations.' These actions are directed against TCOs involved in activities such as ransomware attacks, financial scams, sextortion, phishing campaigns, and impersonation scams. The memorandum specifies that operations will not be sanctioned if they result in loss of life or rise to the level of use of force or armed attack under international law.
Company Participation Requirements
To participate, U.S. companies must undergo rigorous vetting and sign formal contracts with the DOJ or DHS. These contracts may require a bond or escrow of at least $1 million, which would be forfeited if a company fails to comply with operational requirements. Participating firms may also enter commercial agreements with other private entities for threat intelligence, as well as with federal, state, and other agencies.
Significance of the Policy Shift
This initiative marks a shift in U.S. cyber policy by expanding the private sector's role in national security efforts against cybercrime. It aims to leverage the capabilities of private companies to combat threats that cost American consumers billions annually. The policy also expands the types of cyber activity the DOJ may decline to prosecute, moving beyond previous allowances for white-hat hackers conducting security research.
Updates
- Operations can destroy data and systems.
- Participating firms must post a $1 million escrow.
- President Donald Trump signed the memorandum on August 12.
- The policy reverses previous administration statements ruling out private offensive actions.
- Thomas Lind and Sean Cairncross previously stated no plans for private offensive operations.
- Memorandum authorizes "Cyber Surveillance Operations" for intelligence collection.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
The U.S. government has authorized vetted private companies to conduct offensive cyber operations, including data destruction, against foreign cybercrime organizations. This program requires firms to post a $1 million escrow and obtain approval from the Department of Justice and Department of Homeland Security for each operation. The policy marks a reversal from previous administration statements ruling out such private offensive actions.
The Trump administration issued a National Security Presidential Memorandum allowing private security firms to conduct government-authorized cyberattacks against foreign criminal organizations targeting US entities. This marks the first time the US federal government will permit private companies to engage in offensive cyber operations against overseas hackers.
The Trump administration has launched a program allowing private cybersecurity firms to conduct cyberattacks against foreign criminal networks under federal oversight. This initiative aims to utilize private sector capabilities to combat cybercrime, but raises concerns about geopolitical risks and legal implications for participating companies.
The US government has signed a national security presidential memorandum allowing private companies to carry out cyberattacks against "transnational criminal organizations" for the federal government. This decision expands the types of cyber activity the Department of Justice may decline to prosecute, aiming to utilize private sector capabilities against threats like ransomware and financial fraud.
The U.S. government will now permit vetted private companies to carry out offensive cyber operations against international criminal organizations and hackers. This policy shift allows the federal government to utilize private sector capabilities to combat cybercrime, including ransomware and financial scams, marking a significant change in U.S. federal computer hacking laws.
A new White House memorandum allows private security companies to apply for approval to conduct offensive cyber operations against foreign cybercrime organizations under U.S. government oversight. This initiative aims to disrupt transnational criminal organizations involved in various cybercrimes, marking a significant shift in U.S. cyber policy by expanding the private sector's role in such operations.
The Trump administration issued a presidential memorandum allowing private companies to conduct offensive cyber operations against transnational cybercrime organizations, partnering with the Justice and Homeland Security departments. This initiative aims to combat cybercrime, fraud, and predatory schemes that cost American consumers billions annually, by integrating private sector capabilities into national security efforts.
A new presidential memorandum allows vetted US private companies to conduct offensive and intelligence-gathering cyber operations against foreign cybercrime organizations under federal control. This program expands the government's capabilities to counter transnational cyber threats by integrating private sector expertise into national security efforts.