Private security firms will soon be allowed to hack overseas cybercriminals
Summary
A Trump-era memorandum has authorized private security firms to conduct cyberattacks against overseas cybercriminals. This marks the first time the U.S. government has officially sanctioned private entities to perform such actions.
IFF Assessment
FOE
This development is bad for defenders as it potentially legitimizes and expands offensive cyber operations by private entities, which could lead to increased global cyber conflict and instability.
Defender Context
This policy shift indicates a potential escalation in offensive cyber capabilities being outsourced. Defenders should be aware of the increased likelihood of state-sanctioned private actors engaging in offensive operations, which may require enhanced threat intelligence and defensive postures.