Trump Signs Memo Authorizing Private Firms for Cyber Operations Against Foreign Criminals

HomeCyber Security News Trump Signs Memo Authorizing Private Firms for Cyber Operations Against Foreign Criminals By Abinaya August 13, 2026 President Donald Trump has signed a presidential memorandum that creates a pathway for companies to take part in government-led cyber operations against foreign criminal groups. The policy targets cyber-enabled transnational criminal organizations, or CE-TCOs, accused of committing online crimes that harm Americans and businesses. The memorandum directs the National Coordination Center, or NCC, to establish and manage the program. Participating companies may conduct cyber surveillance operations and cyber effects operations, but only under the direction, control, and oversight of the federal government. The Department of Justice and Department of Homeland Security will jointly supervise the effort through two program executive directors. Cyber surveillance operations are defined as covert activity to collect intelligence from computer systems, networks, telecommunications infrastructure, or embedded devices. The definition includes unauthorized access or exceeding authorized access to remain undetected and gather information. That intelligence may support a future operation. Cyber effects operations have a more active purpose. They may manipulate, disrupt, deny, degrade, or destroy information, systems, networks, or infrastructure managed through information technology. The memorandum draws a clear line around actions likely to cause death, serious injury, or an effect that amounts to a use of force or armed attack under international law. These are classified as critical outcomes and cannot be approved by the program executive directors. The program does not give companies a free hand to conduct hack-back activity. Trump Signs Memo Authorizing Private Firms Every operation package must be reviewed and receive written approval and direction before any action takes place. Companies will work on behalf of the government under the government’s lawful authority. The NCC must also coordinate operations across federal law enforcement, intelligence agencies, and departments responsible for foreign policy, treasury, and defense matters. To participate, companies must sign contracts with either the Justice Department or Homeland Security. They will undergo technical, security, and personnel vetting. The future operating procedures must allow both large providers and smaller firms to perform specialist work. Participating companies must disclose relevant commercial relationships and may be required to maintain a bond or escrow of at least $1 million, which can be forfeited for non-compliance. White House reports that the policy requires companies to immediately halt operations, minimize collected data, and notify the NCC if they accidentally target a U.S. person or system. Justice Department review and any required legal or judicial authorization must occur before an operation that implicates constitutional, federal, or international-law obligations is approved. The memorandum gives the program executive directors 60 days to establish operating procedures with the Homeland Security Council. They must report on the program within 180 days and annually afterward. For defenders and threat-intelligence teams, the move could directly create a formal route for sharing business-collected threat data and proposing government-supervised disruption of criminal infrastructure. Its practical impact will depend on the classified workflow, target rules, legal reviews, and selection of participating firms.  Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. -> Integrate ANY.RUN With Your SOC Now. Tags cyber security cyber security news Copy URL Linkedin Twitter ReddIt Telegram Abinayahttps://cybersecuritynews.com/ Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space. Cyber Security Guide Top 10 Malware Threats of the Week – AsyncRAT, Remcos, and Xworm Lead the Surge Three PhaaS Kits Targeting US Organizations to Steal M65 Logins by Bypassing MFA How Top SOCs Detect and Stop AI Phishing that Beats Email Gateways  Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026) An SOC Story of Why Fast Answers Beat Perfect Answers in Cyber Incident Response  Latest Cyber News Cyber Security Cisco Firewall 0-Day Vulnerability Exploited in the Wild to Trigger DoS Condition Cyber Security Critical WordPress RCE Vulnerability Allows Authors to Execute Code via Malicious PNG File Cyber Security News Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access Cyber Attack News New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide Cyber Security Funding Mindgard Raises $30 Million to Tackle AI’s Fastest-Growing Attack Surface Expert Talks Expert Talks From Reactive Forensics to Predictive Defence: Strengthening Cyber Resilience in Banking  Expert Talks Beyond the Lure: What the DoNot Campaign Reveals About Modern Cyber Espionage  Expert Talks Your Incident Response Plan Has a Dependency You Never Approved Expert Talks Security in the AI Era Starts with First Principles  Cyber Security News Planning Your AI Security – How will You Manage All Your Resources?