Trump administration to spend $1 billion on ‘offensive’ hacking operations

The Trump administration has unveiled plans to allocate $1 billion over four years for what it terms 'offensive cyber operations,' a move facilitated by the Department of Defense. The specifics of these operations remain vague, with no detailed description of the tools or software that will be utilized. The funding is aimed at bolstering the capabilities of the U.S. Indo-Pacific Command, which oversees operations in the Asia-Pacific area, particularly concerning China, America's primary geopolitical competitor. This substantial investment in offensive cyber capabilities comes on the heels of a budget that significantly reduced the cyber defense budget by $1 billion, amidst escalating cyber threats from China. Senator Ron Wyden, a Democrat and a veteran member of the Senate Intelligence Committee, expressed concern over the funding cuts to defensive cybersecurity initiatives, including significant reductions to the budget of the Cybersecurity and Infrastructure Security Agency (CISA). This reduction followed a federal court ruling that deemed the dismissal of 130 employees at the agency unlawful, although some funding has since been partially restored. In a statement shared with TechCrunch, Wyden criticized the administration's strategy, remarking, 'The Trump administration has slashed funding for cybersecurity and government technology, leaving our country vulnerable to foreign cyberattacks.' He warned that an expansion of U.S. government hacking efforts could provoke retaliation not only against federal agencies but also against local entities such as rural hospitals and private companies, which may lack the defenses to fend off attacks from state-sponsored hackers. 'Offensive cyber operations' can encompass a wide array of activities, including targeted hacks against adversarial nations and the use of 'zero-day exploits'—previously unknown vulnerabilities in software that enable hackers to infiltrate devices. These operations may also involve the establishment of necessary infrastructure for cyberattacks, as well as intelligence gathering activities like collecting or purchasing internet traffic data. While representatives from the White House and the Department of Defense acknowledged receipt of inquiries regarding this initiative, they did not provide further comments.