60
60
60
Trump turns to private sector in offensive hacking operations memo
Trump signed a national security memorandum authorizing vetted private companies to conduct offensive cyber operations against transnational criminal organizations under federal oversight.
The memorandum creates a federal coordination center program authorizing 'Participating Companies' to conduct Cyber Surveillance Operations and Cyber Effects Operations against foreign cyber-enabled transnational criminal organizations. Participating firms must contract with the Justice Department or Department of Homeland Security, undergo vetting, and comply with existing laws including the Computer Fraud and Abuse Act. The White House cited sustained fraud and cyber-enabled campaigns from TCOs as justification, building on a March fraud-focused executive order. Experts including Veracode co-founder Chris Wysopal called it a major shift in U.S. cyber policy, though it stops short of broader 'hack back' proposals.
78
60
EU's Cyber Resilience Act starts the 24-hour vulnerability clock
EU Cyber Resilience Act reporting rules take effect, requiring manufacturers to disclose actively exploited vulnerabilities to ENISA within 24 hours, with fines reaching €15 million.
The Cyber Resilience Act's Article 14 mandatory reporting duties became applicable, requiring makers of products with digital elements sold in the EU — regardless of where they are based — to file an early warning within 24 hours of becoming aware of an actively exploited vulnerability, a detailed notification within 72 hours, and a final report within 14 days of releasing a fix. Reports must be submitted through ENISA's Single Reporting Platform to the designated CSIRT, and non-compliance with these core duties can trigger fines up to €15 million or 2.5 percent of annual turnover. Manufacturers must also inform affected users of available fixes without undue delay, and most remaining CRA provisions, including mandatory SBOMs and security-by-design requirements, become applicable on December 11, 2027.
80
60
60
60
60
60
60
60
60
60
60
A bold new strategy or a dangerous precedent? Experts are divided on Trump's memo.
Trump presidential memorandum authorizes private-sector companies to conduct federally supervised hacking operations against transnational criminal organizations.
A newly signed presidential memorandum enlists private companies in federal law enforcement hacking operations aimed at transnational criminal organizations, with a 60-day window to establish the program. Experts told CyberScoop the shift raises attribution, targeting and constitutional questions, including risks of private firms accidentally attacking foreign governments and procedures for prior approval before targeting US persons. Critics likened the approach to historical letters of marque, while supporters including NSC cyber policy director Amanda Naylor framed it as bringing private-sector speed to the fight against cybercrime and fraud.
68
60
60
60
60
60
60
60
60
60
60
60
Srsly Risky Biz: Trump's Private Hacker Memo Is the Right Idea
A Trump presidential memo directs DHS to authorize vetted private-sector hackers to conduct cyber operations against foreign cybercriminal groups (CE-TCOs).
A presidential memorandum directs the Department of Homeland Security to establish a program authorizing private companies to conduct cyber surveillance and cyber effects operations against Cyber-Enabled Transnational Crime Organisations (CE-TCOs). Participating companies must pass vetting, obtain government approval before operations, and post a USD $1 million bond. The accompanying fact sheet cites more than USD $20.8 billion in US losses to cyber-enabled crime in 2025. Critics worry about accidental escalation if operations touch foreign government systems.
78
60
60