Cyber Operations — 2026-04-11

National Cyber Director Expands Private Sector Role in Offensive Cyber While Maintaining Government Control

National Cyber Director Sean Cairncross outlined the administration's push to expand the market for offensive cyber capabilities while keeping private industry in an informing rather than operational role. Former NSA cybersecurity director Rob Joyce, now at DataTribe, and former CIA officer Bill MacMillan of Andesite contributed to the policy debate. The FBI conducted court-authorized disruption of Russian-backed hacker infrastructure using shutdown commands. The policy boundary between offensive and defensive cyber remains unclear, with industry figures from Arctic Wolf, Lasso Security, and Trellix weighing in on appropriate private sector involvement.

Analysis
The involvement of former NSA and CIA officials in the policy debate (Rob Joyce at DataTribe, Bill MacMillan at Andesite) illustrates the revolving door between IC operational experience and private sector offensive cyber capability. Cairncross's distinction between private sector informing vs. conducting operations may prove difficult to enforce as the boundary between intelligence collection and active defense blurs.
1 sources
  1. US push to counter hackers draws industry deeper into offensive cyber debate - Nextgov/FCW

View in full brief →

UNCLASSIFIED // OPEN SOURCE