US Presidential Memo Authorizes Selected Private Companies to Join Federal Cyber Operations Against Foreign Criminal Groups

The United States government has established a formal program allowing vetted private-sector companies to participate in offensive cyber operations targeting foreign criminal organizations. Signed by President Donald Trump on August 12, 2026, the presidential memorandum places the initiative under the National Coordination Center with joint oversight from the Department of Justice and the Department of Homeland Security. Participating firms will operate exclusively under government contracts, direction, and supervision, with strict requirements including technical evaluations, financial guarantees of at least one million dollars, and pre-approval for every operation. The program focuses on disrupting ransomware, phishing, financial fraud, and other schemes affecting American citizens while imposing clear limits to prevent unintended harm to US persons or escalation to prohibited levels of force. In contrast to Brazil’s ongoing policy discussions, the US move formally recognizes that advanced offensive capabilities now reside primarily in the private sector and creates a regulated mechanism to access them. Operational rules must be published within 60 days, marking a significant shift in how governments integrate private expertise into state-directed cyber actions.

BoletimSecAugust 13, 2026Translated from Portuguese

Read at source

The United States government has launched a new program that permits carefully selected private companies to take part in cyber operations against foreign criminal organizations. The presidential memorandum authorizing the initiative was signed by Donald Trump on 12 August 2026.

The program will be managed by the National Coordination Center and jointly directed by the Department of Justice and the Department of Homeland Security. Private firms may only participate through formal contracts and will remain under continuous federal direction, control, and supervision.

Authorized activities include network surveillance of criminal groups as well as operations designed to manipulate, interrupt, degrade, or disable digital systems used by transnational organizations. Primary targets encompass infrastructure linked to ransomware, phishing campaigns, financial fraud, and other scams directed at US citizens.

Selection and Contractual Requirements

Companies seeking to join the program must undergo rigorous assessments covering technical capability, operational history, physical security, and personnel reliability. Contracts may require a financial guarantee or deposit of at least US$1 million, which can be forfeited in the event of rule violations. Every individual operation requires written authorization before execution.

Safeguards and Prohibited Outcomes

The memorandum mandates procedures to prevent accidental impact on US citizens, businesses, or systems. Any such incident must trigger immediate cessation of the action and prompt notification to authorities. Activities carrying a risk of death, serious injury, or reaching the threshold of use of force under international law are classified as critical outcomes and cannot be approved by the program’s co-directors.

Final operational guidelines are required within 60 days. The decision represents a notable evolution in government policy by formally acknowledging that leading offensive cyber expertise now resides in the private sector and by establishing a structured channel to leverage that expertise under state oversight.

Donald Trump National Coordination Center Department of Justice

ShareX Facebook LinkedIn Reddit

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Policy & Regulation

Policy & Regulation

Russian Minister Proposes Blocking All SIM Cards Linked to Fraudsters Banned in MAX Messenger

The head of Russia's Ministry of Digital Development, Maksut Shadaev, has suggested extending account bans in the MAX messenger to a broader set of mobile restrictions. Under the proposal, operators would be required to disconnect not only the number used in a fraudulent account but also any other SIM cards belonging to the same individual. The measure would also introduce a cooling-off period preventing the person from registering new numbers after a ban. Officials aim to make it significantly harder for scammers to resume operations following enforcement actions. Key implementation details, including how ownership and involvement in fraud will be verified, remain unspecified in the initial statement. The initiative specifically targets fraud prevention and does not apply to every account suspension in the messenger.

AntiMalwareOct 29, 2026Translated from Russian

Policy & Regulation

Russia Ready to Disclose Source Code of Social Networks, Messengers and AI Models

Russian Minister of Digital Development Maksut Shadaev announced that the country is prepared to open the source code of its domestic social networks, messengers, and video services to international partners. Shadaev stated that Russia will show the internal structure of these platforms and allow joint modification of algorithms. The proposal was presented at the Platform of Sovereign Development exhibition and reported by TASS. He contrasted Western IT products, described as opaque black boxes, with Russia's new approach of transparency to avoid what he called digital colonialism. The same offer extends to Russian foundational AI models, which could be adapted to foreign legislation, cultural requirements, and security standards. No specific products, repository links, timelines, or licensing terms were provided during the speech.

AntiMalwareOct 29, 2026Translated from Russian

Policy & Regulation

Russia Mulls Mandatory Two-Week IMEI Registration for Foreign Smartphones via Gosuslugi

Russian authorities are discussing a new rule requiring owners of smartphones imported without customs clearance or purchased abroad to register the devices through the Gosuslugi portal within two weeks. Failure to register would result in the device being blocked from Russian mobile networks. The Ministry of Digital Development is preparing the requirements, which remain under discussion with possible changes to timelines and details. Devices already operating in Russia before April 2027 would be exempt and continue working without restrictions. Officially imported equipment would be added to the registry automatically. The measure is expected to significantly impact gray-market sellers, potentially forcing up to 70 percent of them out of the market and driving price increases of up to 40 percent for some models.

AntiMalwareOct 29, 2026Translated from Russian