Donald Trump empowers US private companies to conduct cyber-attacks

President Donald Trump signed a memorandum on Wednesday that empowers private companies to engage in offensive cyber-attacks against foreign criminal organizations. The national security presidential memorandum directs the administration to utilize private sector capabilities and innovation to conduct these operations under government direction, control, and authority.

The policy shift effectively grants companies a role traditionally held by government agencies. The memo does not grant unrestricted hacking abilities but authorizes "limited cyber operations at the direction of the US government." Cyber threats have increased due to advancements in artificial intelligence, which can exploit outdated security systems.

Earlier this year, hackers targeted critical infrastructure in several US states, causing disruptions at water facilities. The White House cited ransomware attacks, financial frauds, and other crimes run by transnational criminal organizations (TCOs) in its fact sheet. The Trump administration has previously expressed a desire to increase private firms' involvement in cybersecurity operations.

The memo establishes a framework for private sector companies to collaborate with other private entities and federal, state, local, tribal, and territorial agencies to gather threat information on TCOs and propose cyber operations to counter these threats. The Department of Homeland Security (DHS), through its national coordination center, will create a program to conduct specific cyber operations against foreign TCOs, overseen by DHS and the Department of Justice.

Participating companies, once vetted, will conduct cyber surveillance and cyber effects operations against specified targets. Companies must maintain a bond or escrow of at least $1 million. While private sector participation in cyber operations against criminal targets is not new, it has faced controversy due to concerns over escalation, unintended consequences, and inter-agency coordination issues. The DHS and White House did not provide additional details about the program.