Archive — US — techcrunch
In a first, US will allow some private firms to carry out cyberattacks
The U.S. government is enabling vetted private companies to launch cyberattacks against criminal gangs and hackers for the first time via a new presidential memorandum. This policy aims to leverage private sector capabilities to combat escalating cyber threats while maintaining regulatory control. Concerns over legality and potential diplomatic fallout accompany the change.
Key points
- U.S. government allows private firms to conduct offensive cyber operations against international criminals.
- This marks a significant shift from previous regulations prohibiting private cyberattacks without court approval.
- Operations require federal government supervision and approval from Justice and Homeland Security departments.
- Participating companies must deposit $1 million in escrow to ensure compliance.
- Concerns exist over the legal implications and potential diplomatic consequences of private sector involvement.
Why it matters
- This policy aligns with ongoing trends in cybersecurity where private sector involvement is increasing due to higher cyber threats.
- The decision follows a rise in ransomware and cyberattacks amid growing international tensions, notably with Iran.
- It reflects broader IT trends toward automation and AI-driven cyber operations, which raise additional security and ethical questions.
In conclusion, the U.S. government's shift to engage private firms in offensive cyber operations represents a crucial development in combating cybercrime amidst increasing threats, although it raises significant legal and ethical concerns.