Nextgov U.S. Launches Offensive Cyber Program with Private Sector Involvement
Article Content
- •The U.S. is selecting managers for a new offensive cyber program involving private companies.
- •Vetted firms will conduct operations against foreign cybercriminals under government contracts.
- •Key concerns include funding, liability, and operational clarity for participating companies.
The U.S. government is in the process of selecting managers for a new program that will involve private companies in offensive cyber operations against foreign cybercriminals. This initiative, first announced in August 2026, aims to allow vetted U.S. firms to gather intelligence and disrupt criminal networks. However, significant questions remain regarding funding, liability, and operational guidelines for participating companies. The program will operate under contracts from the Justice Department or Department of Homeland Security, requiring written approval for each mission. Discussions are ongoing about how to compensate companies, especially if operations inadvertently affect innocent parties. The government has historically relied on private firms for technical assistance in cyber operations, but this marks a notable shift towards direct involvement in offensive actions.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What is the purpose of the new program?
How will companies be compensated?
What are the legal implications for participating firms?
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…