The Pentagon is preparing a significant change in its cybersecurity strategy, intending to resort more directly to private companies to expand its offensive hacking capabilities. According to three sources familiar with the document cited by Politico, drafts of the new US Department of Defense cyber defense strategy include language encouraging the use of private contractors to support offensive operations against state-sponsored cyberattacks.
The change comes in a context where private companies are developing artificial intelligence tools and models capable of identifying and exploiting computer vulnerabilities. In recent months, several defense technology companies have raised hundreds of millions of dollars with the promise of selling offensive hacking tools to the government. Large companies like Anthropic have also publicly signaled that they are willing to allow the Pentagon to use their most robust models in offensive cyber operations.
The White House's national cybersecurity strategy, published in March, defined digital offensive as a priority and promised to create new incentives for technology and security companies to help identify and disrupt foreign cyberattacks. However, cooperation between the Pentagon and companies will be subject to strong oversight, with one source emphasizing that "the private sector cannot simply press the buttons on its own."
This will be the first comprehensive guidance from the Department of Defense for cyberspace since 2023 and is expected to be accompanied by an action plan to translate the new priorities into concrete operations. The strategy could be released as early as next week, according to the sources cited by Politico.
