U.S. Cyber Policy Emphasizes Private-Sector Defense Partnerships Over Offensive Hacking
The U.S. government signaled that private industry is not expected to conduct offensive cyber operations on the government's behalf, even as the new national cyber strategy calls for stronger collaboration with commercial partners. National Cyber Director Sean Cairncross said the administration wants to use private-sector capabilities for information sharing, threat intelligence, and defensive support, while offensive action remains the responsibility of agencies that already hold that authority, including the NSA, CIA, FBI, and U.S. Cyber Command.
The same policy direction is reflected in the Energy Department's planned first-ever cyber strategy, which is intended to align with the national strategy and focus on protecting the energy grid through stronger public-private coordination. Energy officials said the plan will prioritize getting timely, actionable information to operators, improving the sector's security resilience, and investing in AI for cyber defense to counter adversaries using AI-enabled offensive capabilities against critical infrastructure.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
5 events from the most recent confirmed update back to the earliest known activity.
Google launches threat disruption unit at RSAC
Google publicly launched a new threat disruption unit within its threat intelligence organization at the RSAC Conference. The company said the unit will use intelligence, legal processes, infrastructure takedowns, public exposure of threat actors, and product improvements to proactively impede adversaries without engaging in 'hacking back.'
Trump cyber officials reject 'letters of marque' and private-sector hack back
Senior administration cyber officials said the new national cyber strategy does not contemplate cyber 'letters of marque' or authorizing private companies to hack on the government's behalf. At the Prague Cyber Security Conference and McCrary Cyber Summit, they said industry's role is to provide visibility and support for government-led actions against criminal and state-backed actors.
FBI urges victims to report incidents to support joint cyber disruption operations
FBI Cyber Division head Brett Leatherman said the bureau's joint sequenced operations to degrade adversaries often begin when victim organizations report incidents to the FBI. He urged organizations to include contacting their local FBI field office in breach-response plans, saying the benefits outweigh liability concerns.
National cyber director says private sector should not conduct offensive cyber operations
At a McCrary Institute event, National Cyber Director Sean Cairncross said the U.S. government does not envision private companies carrying out offensive cyber actions on its behalf. He said industry should instead contribute threat intelligence, technical visibility, and defensive support while agencies with existing legal authority handle offensive operations.
DOE says it is preparing its first cybersecurity strategy for the energy sector
A senior Department of Energy cybersecurity official said the department is developing its first strategic plan focused on protecting the energy grid. The strategy is intended to complement the recently published national cyber strategy and emphasize resilience, public-private partnership, and AI investment for defense of critical energy infrastructure.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
7 references tracked. Mallory keeps watching after this page renders.
The Perils of Privatized Cyberwarfare - The Citizen Lab
citizenlab.ca
Open sourceGoogle launches threat disruption unit, stops short of calling it ‘offensive’ - Nextgov/FCW
nextgov.com
Open sourceWhite House pours cold water on cyber ‘letters of marque’ speculation | The Record from Recorded Future News
therecord.media
Open sourceTrump administration isn’t pushing companies to conduct cyber offense, national cyber director says | CyberScoop
cyberscoop.com
Open sourceNational cyber director doesn’t envision industry doing offensive hacking - Nextgov/FCW
nextgov.com
Open sourceEnergy Department set to release its first-ever cyber strategy | The Record from Recorded Future News
therecord.media
Open sourceThe Perils of Privatized Cyberwarfare | Lawfare
lawfaremedia.org
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Forthcoming U.S. National Cyber Strategy Emphasizes Deterrence and Industry Partnership
The U.S. government is preparing to release a new National Cyber Strategy aimed at deterring foreign cyber adversaries and strengthening public-private collaboration. National Cyber Director Sean Cairncross announced at the Aspen Cyber Summit that the strategy will be concise, actionable, and structured around six pillars, including shaping adversary behavior and enhancing industry partnerships. The strategy intends to move beyond traditional defensive measures by introducing clear costs and consequences for malicious cyber activity targeting U.S. critical infrastructure, reflecting a shift toward a more offensive and coordinated national approach. Officials highlighted that the new strategy will differ from previous versions by focusing on rapid implementation of action items and deliverables, rather than lengthy policy documents. The approach seeks to address the fragmented nature of current U.S. cyber responses by establishing a unified, government-wide framework. The strategy is currently under review by federal agencies, with input from the FBI and private sector leaders, and is expected to be released soon. The administration aims to modernize federal cyber capabilities, accelerate technology adoption, and send a strong deterrent signal to both nation-state and criminal cyber actors.
Mar 21, 2026
US Government Pushes Cybersecurity and AI Resilience for Critical Infrastructure
The U.S. government is advancing multiple **critical infrastructure cybersecurity** initiatives focused on resilience, public-private coordination, and the secure adoption of **AI**. National Cyber Director Sean Cairncross said the administration wants AI to be **secure by design**, framing technical security as an enabler of innovation rather than a barrier. The approach includes closer collaboration with private industry, expanded threat-information sharing, federal support for offensive cyber operations, and new mechanisms for AI companies to coordinate on threat response while the administration revises earlier policies it views as constraining competitiveness. The Department of Energy is preparing to release its first cybersecurity strategic plan to strengthen defenses for the **power grid** and improve preparedness for cyber and physical incidents affecting the energy sector. That effort is expected to deepen coordination with private operators and evaluate AI investments that could help defend critical infrastructure against AI-enabled threats. A separate article on why attacks against critical national infrastructure are dangerous is **not about this same policy development**; it is a general explainer on infrastructure targeting and disruption rather than reporting on the U.S. government’s current AI and energy cybersecurity initiatives.
May 8, 2026
Trump Administration Releases National Cyber Strategy Emphasizing Offensive Operations and Deregulation
President Donald Trump released a long-awaited **national cybersecurity strategy** and signed an accompanying **executive order** directing federal agencies to take action against cybercrime and fraud. The strategy is described as deliberately high-level and organized around six pillars: **shaping adversary behavior** (including greater use of U.S. offensive and defensive cyber capabilities and encouraging private-sector disruption of adversary infrastructure), **promoting “common sense” regulation** (criticizing compliance “checklists” and signaling interest in liability discussions), **modernizing and securing federal networks**, **securing critical infrastructure**, **sustaining superiority in critical and emerging technologies**, and **building cyber talent and capacity**. Multiple reports highlight the strategy’s shift toward a more **direct, “gloves-off” posture** in responding to adversarial cyber threats, with the White House framing it as a recalibration toward more forceful action against actors targeting U.S. networks. The document also ties cyber operations to broader national objectives, explicitly referencing recent administration actions (including operations linked to Iran and Venezuela) as examples of a willingness to use cyber capabilities in support of national missions, while also emphasizing emerging technologies (including **AI**) and workforce development as key enablers of the strategy’s goals.
May 7, 2026