Trump gives free rein to US companies to carry out cyberattacks against hackers

President Donald Trump has authorized U.S. companies to conduct cyberattacks against foreign hackers, according to officials familiar with the move, as reported by The New York Times. The decision was formalized through a national security memo signed by Trump late Wednesday. Under this directive, select American firms would collaborate with the Department of Justice and the Department of Homeland Security to target foreign cybercriminal groups using hacking operations. This approach brings the United States closer to practices used by countries such as China and Russia, where intelligence agencies have long employed private-sector hackers for national security purposes. The memo outlines that these attacks could serve both surveillance and operational functions, including disrupting, manipulating, or destroying enemy information systems and networks. However, the specifics of which companies will participate remain unclear. The policy marks a sharp departure from decades of cybersecurity strategies under both Republican and Democratic administrations, which emphasized strengthening corporate defenses rather than authorizing offensive cyber operations. Private sector involvement in such activities had previously been limited to military and intelligence agencies. Experts warn that allowing private entities to engage in cyber warfare could lead to a chaotic digital frontier, akin to the Wild West. The memo does include safeguards, however, requiring participating companies to undergo selection procedures, sign government contracts with penalties up to $1 million for violations, and obtain approval from the Department of Justice and the Department of Homeland Security before launching an attack. Additionally, the policy explicitly prohibits actions that could likely result in loss of human life, serious injury, or constitute the use of force or armed attack under international law. The initiative reflects a broader shift in U.S. cybersecurity strategy, moving away from passive defense mechanisms toward more aggressive countermeasures. While previous administrations had explored the potential of private-sector collaboration in cyber defense, none had formally sanctioned offensive operations conducted by commercial entities. The new policy raises questions about oversight, accountability, and the potential escalation of conflicts in cyberspace. Trump’s administration has faced scrutiny over its handling of cybersecurity issues, particularly following several high-profile data breaches attributed to foreign adversaries. Critics argue that the proposed measures could blur the lines between legitimate defense and offensive action, potentially increasing the risk of unintended consequences. Supporters, however, contend that the move is necessary to protect critical infrastructure and deter hostile actors operating beyond traditional military boundaries. The memorandum was issued amid growing concerns over the vulnerability of U.S. businesses and government systems to sophisticated cyber threats. Intelligence reports suggest that state-sponsored hackers from rival nations have increasingly targeted American interests, prompting calls for more robust responses. By involving private companies in the effort, the administration aims to leverage their technical expertise and resources to bolster national security capabilities. The policy's implementation will depend on the establishment of clear guidelines and regulatory frameworks to ensure compliance with legal and ethical standards. Officials have indicated that the process will involve extensive consultations with industry leaders and legal experts to address potential challenges. As the program unfolds, it will be crucial to monitor its impact on international relations, corporate behavior, and the overall stability of global cyberspace.