IC Technology & Surveillance — 2026-05-11

White House Formally Adds Offensive Cyberattacks to US Counterterrorism Strategy

The Trump administration on Wednesday released a counterterrorism strategy that formally includes offensive cyber operations among measures used against "those planning to kill Americans or who support those plotting to do so," according to National Security News and Defense One. The strategy expands the designated threat set to include narcotrafficking cartels, transnational gangs, Iranian-backed proxy groups, and "violent left-wing extremists," and proposes Foreign Terrorist Organization designations for certain cartels and gangs to unlock additional intelligence authorities. The document commits to continued cyber operations against Iranian-backed proxy groups but provides no operational detail on the nature of those activities. Both outlets note unresolved legal and policy questions over private-sector involvement in cyber operations and where offense ends and defense begins.

Analysis
The operationally consequential provision is the proposed Foreign Terrorist Organization designation for cartels and transnational gangs, unlocking financial, travel, and communications disruption authorities unavailable against purely criminal organizations. The Iran-proxy language names a continuing campaign against a specific adversary class, the document's clearest operational signal. Private-sector boundary ambiguity carries genuine legal exposure for contractors where offensive and defensive toolsets substantially overlap. The doctrinal inclusion may instead serve primarily as deterrence signaling aimed at foreign state actors rather than genuine authority expansion. Per two outlets drawing exclusively from the released text, public acknowledgment of any specific operation under this authority is unlikely within 12 months, consistent with the cross-administration record of asserting offensive cyber posture while withholding operational confirmation.
2 sources
  1. White House formally adds offensive cyberattacks to US counterterrorism strategy - National Security News
  2. Cyberattacks are now part of US counterterrorism strategy - Defense One

View in full brief →

UNCLASSIFIED // OPEN SOURCE