Private companies can now Hack-Back
Source Reddit Cybersecurity
Discussion
The US government has authorized private companies to conduct offensive cyber operations, commonly referred to as "hack-back," against entities that attack them. This authorization comes with some rules and approval processes intended to limit the scope of these private sector cyberattacks. The move is controversial due to concerns about escalation of cyber conflicts and the potential misuse of offensive capabilities. There is no direct technical vulnerability or exploit described, but rather a policy change affecting cybersecurity operations.
r/cybersecurity (opens in a new tab)u/Pocket-Flapjack0 points0 comments
The US has approved companies to "Hack-Back" if theyre attacked.
Apparently there are some some rules and approvals to reduce the scope of private offensive operations (I say apparently because we know this administration is pay to win).
I am staggered by the insanity of this, having red teams attack networks they percieve as hostile is wild and I think will escalate tensions between nations. Especially because plenty of APTs already use compromised foreign networks to launch their attacks to hide their origins.
Personally I think some companies (probably Anthropic and Palantir) want to train AI models on survailance and offensive cyber security to better monitor US citizens, but then I am a cynic.