IC Technology & Cyber — 2026-08-14
Trump Memo Authorizes Private Sector Offensive Hacking Operations Against Transnational Criminal Organizations
BLUFAuthorized private offensive cyber operations will likely launch within 12 months, but thin congressional oversight and inevitable contact with nation-state infrastructure risk escalation the memorandum's guardrails cannot contain.
President Trump signed a national security memorandum on Wednesday directing a National Coordination Center, jointly overseen by Justice and Homeland Security officials, to authorize vetted private companies to conduct cyber surveillance and cyber effects operations against foreign cyber-enabled transnational criminal organizations 12. Participating companies must sign contracts with DOJ or DHS, undergo vetting, and post a bond of at least $1 million forfeitable for noncompliance, and every operation requires written approval from program directors before action; those directors may not authorize operations resulting in loss of life or rising to use of force under international law 13. The memorandum builds on a March 6 executive order on cyber-enabled fraud and states the program must operate within existing law, including the Computer Fraud and Abuse Act 12. Rep. Bennie Thompson said the oversight procedures remain unclear and argued the administration should work with Congress rather than act via memorandum, while cybersecurity figures voiced mixed reactions: one former Cyber Command official called it "a perpetual motion machine for billable threats," and Veracode co-founder Chris Wysopal called it a major shift in U.S. cyber policy 23.
AnalysisThe National Coordination Center now has an explicit approval gate, a $1 million bond requirement, and a loss-of-life/use-of-force ceiling written into the authorization chain rather than left to agency discretion. At least one participating company very
likely receives written program-director approval for an offensive cyber operation against a transnational criminal organization within the next 12 months, given that the memorandum sets a 60-day deadline for operating procedures and the vetting and contracting mechanics are already specified. Congressional pushback and unresolved questions about targets tied to nation-state infrastructure create the main friction points slowing rollout. Analytic confidence is high, reflecting a primary-source memorandum whose provisions on approval authority and forfeiture terms carry direct evidentiary weight.
4 sources
- Expanding Capabilities to Combat Transnational Cyber-Enabled Crime - The White House
- Trump turns to private sector in offensive hacking operations memo - CyberScoop
- Trump taps cyber firms to go on offensive against criminals - The Record from Recorded Future News
- Trump wants to grant private cyber firms a license to hack back - The Register
View in full brief →