#cyberpolicy — Public Fediverse posts

📰 US Authorizes Private Sector to Conduct Offensive 'Hack-Back' Operations

In a major policy shift, the US government has authorized vetted private companies to conduct offensive cyber operations ('hack-back') against foreign criminal organizations under government oversight. #CyberPolicy #HackBack #GovSec

🔗 https://cyber.netsecops.io/articles/us-authorizes-private-sector-offensive-hack-back-operations/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

Five governments (CISA, NSA, UK, NL, Japan) just published joint guidance on how to run a vulnerability disclosure program: safe harbor, security.txt, a CVE for every finding, no gag NDAs. Soft law, not statute, but now a citable five-government benchmark.

This week's Policy Pulse: https://blog.disclose.io/policy-pulse-issue-25-week-of-july-18-2026/

#VulnerabilityDisclosure #CyberPolicy

With Chinese diplomats reportedly admitting to targeting US Critical Infrastructure as a "warning to the U.S. about Taiwan" and some in the industry war-gaming the possibility of Cyber Effects being used to sway the Trade dispute between the US and China, now seemed a good time to do a reality check on how - if at all - China would do so.

The bottom line - expect a surge in cyber espionage and signaling campaigns targeting US telcos and leadership to provide the CCP a competitive advantage in negotiations and their backdoor dealings.🕵️

Cyber Security doesn't operate in a vacuum - here's a good example of where geopolitics starts to seep in at the edges: https://opalsec.io/is-cyber-a-legitimate-weapon-in-a-tariff-war/

#CyberSecurity #InfoSec #ThreatIntel #China #USChinaTradeWar #Geopolitics #CyberWarfare #CriticalInfrastructure #VoltTyphoon #SaltTyphoon #NationalSecurity #CyberThreats #RiskManagement #GeopoliticalRisk #CyberPolicy #CISA