President Trump signed a memorandum creating a legal framework for approved U.S. tech and cybersecurity firms to conduct government-backed cyber operations against foreign criminal groups, according to Politico. The move comes as Americans reported $20.8 billion in cybercrime losses in 2025, and it grants companies with deep network visibility direct authority to strike back at attackers.
Washington is handing the private companies that run networks direct authority to defend them. That creates a collision between corporate incentives and national security decisions. Cloud providers, security vendors, their customers, and foreign governments now face a blurred line between private retaliation and state-sponsored action.
Washington is admitting something obvious: the private sector sees more of the battlefield than government does. But once you authorize companies to hit back, you import vendor incentives into national security. Bad attribution, collateral damage, and legal gray zones aren't side issues. They're the whole story. A tech firm striking what it thinks is a criminal server could easily hit shared hosting, take down legitimate services, or trigger an international incident when the target is a foreign gang sitting inside someone else's infrastructure. The memo creates legal cover, but it doesn't solve the targeting problem.
Filed to the Technology desk · Aug 13