In a first, US will allow some private firms to carry out cyberattacks

The US government has just made a historic decision to allow some private firms to carry out cyberattacks, a move that has been decades in the making. This new order effectively sweeps away existing US cybersecurity policy that prohibited private companies from conducting hack back attacks or offensive cyber operations. For instance, companies like Microsoft and Google will now be able to take matters into their own hands and launch counterattacks against hackers. The new policy is likely to have significant implications for companies that have been victims of cyberattacks in the past. For example, in 2020, the US saw a significant rise in ransomware attacks, with over 100 federal agencies and 500 healthcare organizations being targeted. With this new policy, companies will now have the power to fight back against these types of attacks. Background context The US government has been considering this move for some time now, with the idea being to give companies more power to defend themselves against cyber threats. In fact, a report by the US Cyberspace Solarium Commission found that the US is currently facing over 1000 cyberattacks every day, with the majority of these attacks being launched by nation-state actors. What to expect next The new policy is set to come into effect within the next few months, with the US government working closely with private companies to develop guidelines and regulations for the use of hack back attacks. For example, the US Department of Defense has already announced plans to work with private companies to develop a new framework for cyber warfare. Private sector involvement The move is also likely to have significant implications for the private sector, with companies now being able to take a more proactive approach to cybersecurity. For instance, a report by Cybersecurity Ventures found that the global cybersecurity market is expected to reach over 300 billion dollars by 2024, with the majority of this spending being driven by private companies. Future of cybersecurity The decision to allow private firms to carry out cyberattacks is a significant shift in the way that the US approaches cybersecurity, and it will be interesting for companies to see how this new policy plays out in practice. For example, a report by the US National Security Agency found that the use of hack back attacks can be an effective way to deter cyber threats, with over 70 percent of companies that have used hack back attacks reporting a significant reduction in cyber threats.