White House taps security firms for offensive hack-back operations
White House memo allows private firms to conduct offensive cyber operations against foreign criminals.
A new White House memorandum, signed by President Trump, authorizes the National Coordination Center (NCC) to establish a program enabling private security firms to conduct offensive cyber operations against foreign cybercrime organizations. This initiative aims to leverage private sector expertise for disrupting transnational criminal activities like ransomware and phishing, with strict government oversight and compliance requirements.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Veracode?
Get an email when a new story names Veracode, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA new White House memorandum expands the U.S. cybersecurity posture by allowing vetted private security firms to conduct offensive operations against foreign cybercrime organizations under strict government oversight. This represents a significant policy shift, blurring the line between public and private roles in national cyber defense. Without robust compliance frameworks and accountability measures, such programs risk legal ambiguity, unintended escalation, or misuse of offensive capabilities. Organizations operating in this space must ensure rigorous governance, auditability, and adherence to both domestic law and international norms. The initiative underscores the growing recognition that ransomware and phishing threats require proactive, not just reactive, countermeasures.