The U.S. government has announced a groundbreaking change in its cyber defense strategy: vetted private companies will now be allowed to launch offensive cyber operations against international criminals and hackers for the first time.

This move marks a seismic shift from previous policies, where only the federal government was permitted such activities. Private companies can now conduct surveillance and disruptive attacks, provided they meet strict criteria and operate under government supervision.

The policy is likely to face opposition, with critics arguing it could lead to legal challenges and international tensions. Concerns also linger over the potential for abuse or misidentification of targets by private firms.

While the new approach aims to strengthen cyber defenses against threats like ransomware and financial scams, some cybersecurity experts remain skeptical about its long-term impact and risks.