The Trump administration announced a new program late Wednesday through presidential memorandum that would permit selected U.S. private companies to conduct authorized cyber operations against foreign cybercriminals designated by the government. Traditionally, such work has been handled exclusively by federal agencies. The initiative does not modify existing anti-hacking laws but requires participating companies to operate under federal contracts, representing a departure from current private sector practices in cyberspace.
Under the program framework, participating companies would enter agreements with the Department of Justice or Department of Homeland Security, undergo extensive vetting procedures, and maintain a $1 million bond that the government may claim if obligations are not met. Companies would be authorized to access foreign computer networks and conduct operations resulting in manipulation, disruption, denial, degradation, or destruction of information systems. The memo grants DOJ and DHS two months to clarify outstanding legal authorities, protections, and target selection processes. The program targets foreign entities involved in organized crime, money laundering, and other criminal activity rather than state actors.
The initiative aligns with recent legislative proposals from Republican congressional members who have advocated for cyber “privateers,” terminology derived from 16th-century naval warfare practices. Industry observers note the program could attract smaller firms, venture capital-backed startups, and companies seeking lucrative government contracts, with potential participants viewing it as an avenue for expanded federal business relationships.
However, the proposal has generated substantial debate within the cybersecurity community regarding practical and legal implications. Critics highlight concerns about jurisdictional complications, potential collateral damage, liability exposure, and unintended international incidents resulting from attacks targeting organizations operating in ambiguous state-sponsored and non-state-sponsored grey areas. Some industry leaders expressed reluctance to participate due to risks of mistakenly targeting U.S. companies or triggering disproportionate counterattacks, while others entered a cautious wait-and-see position regarding implementation details and legal protections.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI