From Foreign Policy · John Haltiwanger, Rishi Iyengar · · 3m
Trump's plan to let companies hack back
The Trump administration wants private tech firms to conduct offensive cyberattacks against foreign adversaries with government blessing.
In brief
The Trump administration wants private tech firms to conduct offensive cyberattacks against foreign adversaries with government blessing. The U.S. is shifting from defensive cybersecurity to offensive operations by partnering with private companies, but risks retaliation against those firms. Originally reported by…
Trump reshapes U.S. cyberwarfare strategy
The Trump administration is cutting government cyber staff while pushing for more offensive attacks against adversaries like Iran and Venezuela, rather than just defending U.S. systems.
Private companies get hacking permission
Trump's national security memorandum directs the government to partner with vetted private companies to conduct cyberattacks and surveillance against foreign criminal networks targeting U.S. citizens.
FBI announces new cyber partnership model

The FBI released its first unclassified cyber strategy calling for joint operations with private companies like Google, Microsoft, Meta, and CrowdStrike to disrupt criminal hackers.
“to make industry an operational partner in this fight, as opposed to just somebody we shared threat intelligence back and forth with”
White House cyber director explains shift
Sean Cairncross, the White House national cyber director, told the Billington Cybersecurity Summit that the administration is engaging with private industry in a new way on cyber operations.
Tech giants become first line of defense
Google and Microsoft build systems used globally and are prime targets for adversarial hackers, making them ideal partners for offensive operations because they have expertise the government lacks.
“Folks are using their technology, no one's using the bureau's technology”
Experts cautiously support the approach

Anne Neuberger, former deputy national security advisor for cyber, says the plan works as an experiment to increase capacity against targets that operate with impunity.
“If this approach can bring just more operations to bear on targets like these that fundamentally end up operating with a lot of impunity, my own view is that's a good thing.”
Retaliation risk looms large
The biggest concern is that foreign nations could retaliate against U.S. companies for hacking groups tied to their governments, putting private firms in the crosshairs.
Government must protect participating firms
FBI cyber division assistant director Brett Leatherman acknowledged the retaliation risk and said the U.S. must conduct operations lawfully while protecting companies like it protects its own personnel.
Vetting companies is critical

Neuberger emphasized that the government must carefully choose which companies participate, trusting only those with proven track records rather than reckless operators.
“I'm assuming they're not going to approve the cowboys”
Military preparing similar shift
The U.S. military is reportedly preparing to bring in private contractors to conduct cyberoperations, extending the private sector partnership model beyond the FBI.
AI development fears reach fever pitch
Artificial intelligence is evolving rapidly and causing existential dread, with growing calls for tech companies to halt development due to a perfect storm of concerns.
Iran deal remains out of reach
Trump suggested Iran wants a deal to end the war, but Tehran says no agreement is possible until its conditions are met, including U.S. acknowledgment of Iranian control over the Strait of Hormuz.
Trump willing to absorb war costs
The Iran war has cost the U.S. 38 billion dollars and driven up energy prices, but Trump called it a very inexpensive price and shows no urgency to end it before midterms.
“a very inexpensive price to pay for what we've done”
Trump focused on 2028 succession
Trump's priority is foreign policy and choosing his successor for 2028, not the midterm elections, so he's willing to maintain high oil prices and continue the Iran war.
King Charles warns of AI dangers
Britain's King Charles spoke about the potential existential dangers of artificial intelligence at a summit in Scotland, calling for sufficient means of control.
“Surely, we need sufficient means of control before it is all too late?”
What matters most
The U.S. is shifting from defensive cybersecurity to offensive operations by partnering with private companies, but risks retaliation against those firms.


