New Trump cyber strategy prompts companies to mull legal limits

The Trump administration’s push for aggressive cybersecurity tactics that would tap the private sector to help disrupt suspected malicious cyber actors is sparking questions about how far companies can go without facing retaliation, escalated conflicts, or legal risks.

Deterring adversaries’ attacks is one of the key pillars of the soon-to-come National Cyber Strategy, which spells out the White House’s cybersecurity priorities, according to sources briefed on the administration’s plans. National Cyber Director Sean Cairncross has already voiced the administration’s goal to pivot from a defensive stance to one that shrinks the incentive for nation states, ransomware groups and other cyber criminals to act.

The shift in strategy, backed by an unprecedented $1 billion allocation for offensive cyber operations in Trump’s 2025 tax and spending law, is raising questions about how far the private sector can take disruptive cyber actions without the safeguards afforded by government contracts. As the administration prepares to release its cyber plan, the private sector and government are grappling with the evolving role that private companies from established tech giants to Silicon Valley startups will play in this new cyber landscape.

Read more at Bloomberg Law