In a first, US will allow some private firms to carry out cyberattacks

The White House published a presidential memorandum authorizing vetted private companies to conduct offensive cyber operations—surveillance and disruptive attacks—against international criminal gangs and hackers under federal supervision, with escrow, DOJ/DHS approvals, and restrictions to avoid targeting Americans or U.S. systems; the report highlights legal, diplomatic, and safety risks, and places the policy in the context of recent intrusions into U.S. water infrastructure attributed to Iranian-backed actors and emerging AI-driven cyberattacks.