Ethical Hacking News
The Trump administration has announced a new cybersecurity framework that allows private firms to launch international cyberattacks. The move aims to combat cybercrime by utilizing the innovative capabilities of the private sector, but cybersecurity experts have raised concerns about potential risks and challenges associated with this approach.
The Trump administration has announced a new cybersecurity framework that allows private firms to launch international cyberattacks. The framework aims to combat cybercrime by utilizing the innovative capabilities of the private sector, with the Department of Justice and Homeland Security overseeing private firms. Private firms must meet requirements in technical proficiency, performance, facility security, and other specifications, and hold a $1 million bond or escrow. Cybersecurity experts have raised concerns about potential risks and challenges associated with the new framework, including personal legal risk and unintended consequences. Experts warn that private firms may not be able to distinguish between legitimate and innocent infrastructure, potentially putting them at risk of harming civilians. The US government previously carried out its own cyber operations, but now is considering partnering with private cybersecurity companies.
The recent announcement by the Trump administration has sparked controversy and debate among cybersecurity experts, policymakers, and the general public. The framework, which will allow private firms to launch international cyberattacks, aims to combat cybercrime by utilizing the innovative capabilities of the private sector.
According to a presidential memorandum published on Wednesday, the Department of Justice and Department of Homeland Security will oversee private firms that operate under the control and oversight of the federal government. These firms must meet requirements in technical proficiency, proven performance of cyber operations, facility security, and other technical specifications. Companies in the program must hold a bond or escrow of at least $1 million that they'll forfeit if they don't comply with their contractual agreement.
The memorandum describes private businesses as "underutilized" forces for fighting criminal networks. "It is the policy of the United States to use all instruments of national power, including the innovative capabilities of the private sector, to combat cybercrime," it says. However, cybersecurity experts have raised concerns about the potential risks and challenges associated with this new framework.
Jason Healey, a senior cyber conflict researcher at Columbia University, notes that "Anyone conducting these operations is doing so at substantial personal legal risk." Jake Williams, the vice president of research and development at Hunter Strategy, similarly warns that "Americans participating in these operations could easily be classified as non-uniformed combatants while traveling overseas."
Ben Bernstein, a manager for the cybersecurity advisers team at Huntress, also expresses concerns about how this program will play out. "Threat actors don't launch attacks from labeled servers in Moscow; they route traffic through compromised, innocent infrastructure, like a vulnerable router at an Ohio dental office or a hospital network," Bernstein says. "That makes it practically impossible to 'strike back' without taking out innocent bystanders."
The US government previously carried out its own cyber operations, rather than relying on third parties. President Donald Trump began making plans to get private cybersecurity companies involved last year, according to Bloomberg.
The Trump administration's new cybersecurity framework has sparked debate about the role of private firms in combating cybercrime and the potential risks associated with this approach. While some argue that private firms can bring innovative capabilities and expertise to the fight against cybercrime, others caution that the risks may outweigh the benefits.
As policymakers and experts grapple with these complex issues, it remains to be seen how this new framework will play out in practice. Will it prove effective in combating cybercrime, or will it create unintended consequences? Only time will tell.
Related Information:
https://www.ethicalhackingnews.com/articles/The-Trump-Administrations-New-Cybersecurity-Framework-Allowing-Private-Firms-to-Launch-International-Cyberattacks-ehn.shtml
https://www.theverge.com/policy/979734/trump-administration-cybercrime-private-firms
Published: Thu Aug 13 16:16:28 2026 by llama3.2 3B Q4_K_M
