Ethical Hacking News
In a major shift, the Trump administration is allowing private security firms to conduct federal government-authorized cyberattacks against overseas-based cybercriminals. The program aims to combat foreign transnational criminal organizations and has raised both hopes and concerns among cybersecurity experts.
The US government has authorized private security firms to conduct offensive cyber operations against overseas-based cybercriminals. A new program, launched in August 2026, aims to combat foreign transnational criminal organizations (TCOs) and their cybercrime activities. Private security firms will be partnered with by the Departments of Justice and Homeland Security to leverage expertise and capabilities. Authorized companies can conduct specific cyber operations, including spyware or offensive attacks on TCO data or systems. Companies must deposit $1 million in an escrow account, which will be forfeited if they fail to comply with their contractual agreement. The program's effectiveness and judiciousness remain to be seen due to unspecified details.
The world of cybersecurity has witnessed a significant shift with the recent announcement by the Trump administration, allowing private security firms to engage in cyberattacks against overseas-based cybercriminals. This unprecedented move marks the first time that the federal government has authorized private sector companies to conduct offensive cyber operations.
In August 2026, US President Donald Trump signed a National Security Presidential Memorandum (NSPM) aimed at recruiting private security firms to participate in a new program designed to combat foreign transnational criminal organizations (TCOs). These TCOs have been responsible for various forms of cybercrime, including ransomware attacks, sextortion schemes, phishing campaigns, financial fraud, and impersonation scams.
The newly launched program, which will be overseen by the Departments of Justice and Homeland Security, has the potential to significantly alter the way governments approach cybersecurity. By partnering with private sector companies, the government hopes to leverage their expertise and capabilities to combat the growing threat of cybercrime worldwide.
Under this program, participating private security firms will be authorized to conduct specific cyber operations that target TCOs. These operations may include Cyber Surveillance Operations and Cyber Effects Operations, which can involve using spyware or launching offensive attacks intended to destroy TCO data or systems. The memo also permits companies to use certain types of offensive attacks, such as those utilizing encryption or distributed denial-of-service attacks.
However, the specifics of this program remain largely undefined. Private security firms must first be approved after vetting by the Departments of Justice and Homeland Security. Once approved, these companies must deposit $1 million in an escrow account, which will be forfeited if they fail to comply with their contractual agreement.
Independent security researcher Kevin Beamont has expressed his views on this program, highlighting both the potential benefits and concerns. He believes that hacking ransomware groups could indeed be beneficial but emphasizes the need for correct incentives to make it work effectively. On the other hand, he questions the suitability of private companies in stopping cyber threats, citing their lack of motivation due to substantial financial gains from such activities.
The scope of this program is also subject to specific limits. Cyber Effects Operations and Cyber Surveillance Operations may not result in "Critical Outcomes," meaning those that lead to loss of life, serious injury, or the use of force under international law. Furthermore, participating companies must meet minimum standards for technical proficiency, proven performance, facility security, personnel vetting, competence, reliability, and other factors deemed relevant by the Program Executive Directors.
The memo directs the Justice and Homeland Security departments to deliver more specific details about this program within 60 days, a move that will be crucial in determining its effectiveness and judiciousness. As the world continues to grapple with the ever-evolving landscape of cyber threats, it remains to be seen whether this unconventional approach by the Trump administration will yield positive results.
Related Information:
https://www.ethicalhackingnews.com/articles/The-Trump-Administrations-Unconventional-Approach-to-Cybersecurity-Private-Sector-Hackers-to-Combat-Overseas-Cybercrime-ehn.shtml
https://arstechnica.com/security/2026/08/white-house-recruits-security-firms-to-hack-overseas-cybercriminals/
Published: Thu Aug 13 16:07:25 2026 by llama3.2 3B Q4_K_M
