Trump Authorises Private Firms to Conduct Offensive Cyber Operations

WASHINGTON — US President Donald Trump has signed a landmark presidential national security memorandum enabling private technology and cyber security firms to carry out offensive cyber operations against foreign criminal networks.

The directive marks a pivotal shift in Washington’s digital defence policy. Historically, offensive cyber measures and network disruption were strictly the domain of federal intelligence agencies, the Department of Defense, and federal law enforcement. Under the new framework, the US administration seeks to harness commercial innovation and private-sector agility to bolster national security.

White House officials clarified that the memorandum does not grant commercial entities an unchecked mandate to launch vigilante cyber attacks. Participating contractors will operate under strict federal direction, executing targeted, government-sanctioned operations rather than operating autonomously.

The decision comes amidst heightened global apprehension over increasingly sophisticated artificial intelligence models, which threat actors have deployed to breach legacy security systems. Earlier this year, cyber attacks targeting critical US infrastructure disrupted municipal water facilities across multiple states. A White House fact sheet highlighted the growing menace posed by foreign-based Transnational Criminal Organisations (TCOs) engaging in large-scale ransomware operations, extortion, and financial fraud.

Building upon the administration’s national cyber strategy released in March, which pledged incentives for private-sector cooperation, the memo establishes a legal mechanism for commercial entities to collaborate with federal, state, local, tribal, and regional government bodies. Firms can gather intelligence on TCO threats and submit proposals for targeted counter-operations.

Under the framework, the Department of Homeland Security (DHS)—via the National Coordination Centre of the Homeland Security Task Force—and the Department of Justice will oversee a dedicated programme to disrupt TCO operations. Authorised contractors will be permitted to conduct two main types of actions:

• Cyber Surveillance Operations: Monitoring and collecting intelligence on targeted threat networks.

• Cyber Effect Operations: Measures designed to alter, disrupt, deny access to, degrade, or destroy targeted information systems, networks, or physical infrastructure controlled by those systems.

To mitigate liability and ensure accountability, participating companies must deposit a minimum of $1 million in escrow as a financial performance bond.

Despite these safeguards, legal experts and national security analysts have voiced strong reservations. Enlisting commercial entities in state-sanctioned digital combat raises concerns regarding unintentional escalation, collateral damage to third-party infrastructure, and inter-agency coordination hurdles.

Requests sent to the Department of Homeland Security and the White House for further clarification on the operational oversight mechanisms yielded no immediate response.