The August 2025 White House presidential memorandum explicitly prohibits private cyber contractors from attacking nation-state actors

Overview Debates Related claims Topics

The August 2025 White House cyber privateering initiative derives its legal authority from the Computer Fraud and Abuse Act rather than Article I, Section 8 of the United States Constitution

Chris Giancarlo presented his proposal to revive letters of marque and reprisal for cyber privateering to the United States House Committee on Agriculture and members of the United States Senate

Chris Giancarlo presented the concept of cyber privateering at a White House crypto summit in March 2025 attended by Commerce Secretary Howard Lutnick and Treasury Secretary Scott Bessent

The August 2025 National Security Presidential Memorandum on cyber operations set an October 11 deadline for federal agencies to draft implementation rules

Hospital systems represent the largest target for ransomware and cyberattacks globally

In August 2025, the White House issued a National Security Presidential Memorandum establishing a process to authorize private government contractors to conduct offensive cyber operations

Chris Giancarlo and Franklin Templeton Crypto's Chris Perkins co-authored an op-ed in Cointelegraph proposing the revival of constitutional letters of marque to authorize offensive private cyber operations

The August 2025 White House presidential memorandum restricts authorized private cyber contractors to targeting private criminal actors

The National Security Agency issued a public advisory warning organizations to prepare for updates addressing two critical vulnerabilities in PHP

Two critical PHP vulnerabilities reported in October 2026 permit remote code execution without requiring user authentication

Indian certificate authority eMudhra issued digital certificates signed with weak private keys

Third-party auditors audited eMudhra twice while the certificate authority was actively signing certificates with weak private keys

Cryptographer Paul Miller released software patches addressing code vulnerabilities identified using the Kimmy K3 artificial intelligence model

Hardware hacker Joe Grand verified that a Ledger Nano X purchased in Thailand contained unauthorized wiring and an added circuit board

On October 9, 2026, cryptocurrency wallets associated with compromised Ledger devices began being drained of funds

In June 2026, a security researcher in Japan observed at least 90 compromised Ledger devices exfiltrating seed phrases remotely

Single-signature Coldcard Bitcoin wallets that utilized single-word or short numerical passphrases were compromised during the July 29, 2026 Coldcard exploit

OpenSats established a dedicated Red Team fund to support open-source cybersecurity research

The 2026 Ledger security failure was caused by a physical supply chain interception rather than a cryptographic entropy defect

On October 10, 2026, Ledger confirmed the presence of unauthorized physical implants inside affected customer devices