US to allow private firms to conduct offensive cyberattacks for the first time

A new US executive order will for the first time allow certain private companies to carry out offensive cyber operations, including "hack-back" attacks against hackers targeting them. The move reverses decades of American cybersecurity policy that prohibited private entities from conducting offensive cyber actions. The policy shift is expected to prove controversial among digital security experts.