A memo from the Trump administration would authorise private security firms to conduct cyber attacks against overseas cybercriminals, in what Ars Technica describes as the first such government authorisation of the private sector.
Key facts
- Ars Technica reports that the Trump administration issued a memo authorising private security firms to hack overseas cybercriminals.
- Ars Technica describes it as the first time the government has authorised the private sector to perform cyber attacks.
- The measure is aimed at cybercriminals located overseas, according to the report.
- The report was published by Ars Technica on 13 August 2026.
- Details on how such authorisations would be granted, overseen or limited were not provided in the available source material.
Private security firms would be permitted to carry out cyber attacks against overseas cybercriminals under a new memo from the Trump administration, according to a report published by Ars Technica.
The outlet described the memo as the first time the U.S. government has authorised the private sector to perform cyber attacks. Ars Technica reported that the authorisation is aimed specifically at cybercriminals located overseas.
Beyond the existence of the memo and its stated purpose, further operational details were not provided in the available source material. It remains unclear from the reporting how such authorisations would be granted, overseen or limited in practice, and the full text of the memo was not available.
Why it matters
According to Ars Technica, the memo marks the first time the U.S. government has authorised private firms to conduct offensive cyber operations. Key questions about oversight, accountability and implementation are not yet answered in the available reporting.
Frequently asked questions
What does the memo allow private security firms to do?
According to Ars Technica, the memo would allow private security firms to perform cyber attacks against overseas cybercriminals.
Why is this considered significant?
Ars Technica reports that it is the first time the government has authorized the private sector to perform cyber attacks, which have traditionally been carried out by government agencies.
Who is the target of these authorized attacks?
The reporting states the measure is aimed at cybercriminals located overseas.