The Trump administration is introducing a programme that would allow approved private cybersecurity firms to carry out cyber operations against foreign criminal networks under federal direction and supervision. Supporters argue that it would bring private-sector capabilities into the fight against cybercrime, but critics warn it could blur legal and geopolitical boundaries and risk harming innocent systems.

The Justice Department and Department of Homeland Security would oversee participating companies, which must demonstrate technical and security competence and maintain at least $1 million in bond or escrow funds. Firms would be barred from targeting groups formally part of, or wholly directed by, foreign governments, though experts say such links are often difficult to establish; they also warn that attacks may be routed through compromised civilian infrastructure, making retaliation hazardous.