U.S. Cyber Policy Emphasizes Private-Sector Defense Partnerships Over Offensive Hacking
The U.S. government signaled that private industry is not expected to conduct offensive cyber operations on the government's behalf, even as the new national cyber strategy calls for stronger collaboration with commercial partners. National Cyber Director Sean Cairncross said the administration wants to use private-sector capabilities for information sharing, threat intelligence, and defensive support, while offensive action remains the responsibility of agencies that already hold that authority, including the NSA, CIA, FBI, and U.S. Cyber Command.
The same policy direction is reflected in the Energy Department's planned first-ever cyber strategy, which is intended to align with the national strategy and focus on protecting the energy grid through stronger public-private coordination. Energy officials said the plan will prioritize getting timely, actionable information to operators, improving the sector's security resilience, and investing in AI for cyber defense to counter adversaries using AI-enabled offensive capabilities against critical infrastructure.
Timeline
Mar 24, 2026
Google launches threat disruption unit at RSAC
Google publicly launched a new threat disruption unit within its threat intelligence organization at the RSAC Conference. The company said the unit will use intelligence, legal processes, infrastructure takedowns, public exposure of threat actors, and product improvements to proactively impede adversaries without engaging in 'hacking back.'
Mar 19, 2026
Trump cyber officials reject 'letters of marque' and private-sector hack back
Senior administration cyber officials said the new national cyber strategy does not contemplate cyber 'letters of marque' or authorizing private companies to hack on the government's behalf. At the Prague Cyber Security Conference and McCrary Cyber Summit, they said industry's role is to provide visibility and support for government-led actions against criminal and state-backed actors.
Mar 17, 2026
FBI urges victims to report incidents to support joint cyber disruption operations
FBI Cyber Division head Brett Leatherman said the bureau's joint sequenced operations to degrade adversaries often begin when victim organizations report incidents to the FBI. He urged organizations to include contacting their local FBI field office in breach-response plans, saying the benefits outweigh liability concerns.
Mar 17, 2026
National cyber director says private sector should not conduct offensive cyber operations
At a McCrary Institute event, National Cyber Director Sean Cairncross said the U.S. government does not envision private companies carrying out offensive cyber actions on its behalf. He said industry should instead contribute threat intelligence, technical visibility, and defensive support while agencies with existing legal authority handle offensive operations.
Mar 17, 2026
DOE says it is preparing its first cybersecurity strategy for the energy sector
A senior Department of Energy cybersecurity official said the department is developing its first strategic plan focused on protecting the energy grid. The strategy is intended to complement the recently published national cyber strategy and emphasize resilience, public-private partnership, and AI investment for defense of critical energy infrastructure.
See the full picture in Mallory
Mallory subscribers get deeper analysis on every story, including:
Who’s affected and how
Deep-dive technical analysis
Actionable next steps for your team
IPs, domains, hashes, and more
Ask questions and take action on every story
Filter by topic, classification, timeframe
Get matching stories delivered automatically
Related Entities
Threat Actors
Malware
Organizations
Affected Products
Sources
2 more from sources like the record media and lawfare media
Related Stories
Forthcoming U.S. National Cyber Strategy Emphasizes Deterrence and Industry Partnership
The U.S. government is preparing to release a new National Cyber Strategy aimed at deterring foreign cyber adversaries and strengthening public-private collaboration. National Cyber Director Sean Cairncross announced at the Aspen Cyber Summit that the strategy will be concise, actionable, and structured around six pillars, including shaping adversary behavior and enhancing industry partnerships. The strategy intends to move beyond traditional defensive measures by introducing clear costs and consequences for malicious cyber activity targeting U.S. critical infrastructure, reflecting a shift toward a more offensive and coordinated national approach. Officials highlighted that the new strategy will differ from previous versions by focusing on rapid implementation of action items and deliverables, rather than lengthy policy documents. The approach seeks to address the fragmented nature of current U.S. cyber responses by establishing a unified, government-wide framework. The strategy is currently under review by federal agencies, with input from the FBI and private sector leaders, and is expected to be released soon. The administration aims to modernize federal cyber capabilities, accelerate technology adoption, and send a strong deterrent signal to both nation-state and criminal cyber actors.
1 months ago
US Government Pushes Cybersecurity and AI Resilience for Critical Infrastructure
The U.S. government is advancing multiple **critical infrastructure cybersecurity** initiatives focused on resilience, public-private coordination, and the secure adoption of **AI**. National Cyber Director Sean Cairncross said the administration wants AI to be **secure by design**, framing technical security as an enabler of innovation rather than a barrier. The approach includes closer collaboration with private industry, expanded threat-information sharing, federal support for offensive cyber operations, and new mechanisms for AI companies to coordinate on threat response while the administration revises earlier policies it views as constraining competitiveness. The Department of Energy is preparing to release its first cybersecurity strategic plan to strengthen defenses for the **power grid** and improve preparedness for cyber and physical incidents affecting the energy sector. That effort is expected to deepen coordination with private operators and evaluate AI investments that could help defend critical infrastructure against AI-enabled threats. A separate article on why attacks against critical national infrastructure are dangerous is **not about this same policy development**; it is a general explainer on infrastructure targeting and disruption rather than reporting on the U.S. government’s current AI and energy cybersecurity initiatives.
2 weeks ago
Trump Administration Releases National Cyber Strategy Emphasizing Offensive Operations and Deregulation
President Donald Trump released a long-awaited **national cybersecurity strategy** and signed an accompanying **executive order** directing federal agencies to take action against cybercrime and fraud. The strategy is described as deliberately high-level and organized around six pillars: **shaping adversary behavior** (including greater use of U.S. offensive and defensive cyber capabilities and encouraging private-sector disruption of adversary infrastructure), **promoting “common sense” regulation** (criticizing compliance “checklists” and signaling interest in liability discussions), **modernizing and securing federal networks**, **securing critical infrastructure**, **sustaining superiority in critical and emerging technologies**, and **building cyber talent and capacity**. Multiple reports highlight the strategy’s shift toward a more **direct, “gloves-off” posture** in responding to adversarial cyber threats, with the White House framing it as a recalibration toward more forceful action against actors targeting U.S. networks. The document also ties cyber operations to broader national objectives, explicitly referencing recent administration actions (including operations linked to Iran and Venezuela) as examples of a willingness to use cyber capabilities in support of national missions, while also emphasizing emerging technologies (including **AI**) and workforce development as key enablers of the strategy’s goals.
2 weeks ago