The removal of PPD-20, an Obama-era policy limiting use of destructive offensive cyberweapons, signals a watershed moment for how the US engages in cyberwarfare
Mack DeGeurin / New York Magazine : Tweets: @selectall Tweets: Select All / @selectall : Buried beneath a mound of political scandal, the Trump administration silently rescinded key regulations limiting the use of destructive cyberweapons http://nymag.com/...
Context & Ripple Effects
This lands on top of two earlier moves from the same summer: sources reported in August that Trump had reversed classified Obama-era rules governing cyberweapons (reversed classified Obama-era rules), and June reporting tied Cyber Command's elevation to an independent command and a more offensive posture for US cyber operations (Cyber Command's elevation and broader commander authority). Naming PPD-20 makes concrete what those reports gestured at: the specific Obama-era constraint requiring White House sign-off before destructive offensive operations is gone.
The rescission also completes an arc Obama himself started — his administration paired defensive restraint with offensive signaling tools like the 2015 executive order authorizing targeted sanctions over cyberattacks. What changed under Trump is who holds the trigger: authority moved from the Situation Room to operational commanders.
First-order effects
- DoD and Cyber Command gain the immediate ability to authorize destructive offensive cyber operations without case-by-case White House approval, shortening the decision chain for strikes against adversary networks.
- Adversary governments now face a US that treats destructive cyber operations as a routinely delegated military tool rather than an exception requiring presidential sign-off.
Second-order effects
- The delegation proved durable enough that the Biden administration spent years weighing how to claw it back — by 2022, sources reported it was considering undoing the Trump-era policy that let DoD and Cyber Command act without White House approval (Biden weighing changes to the Trump-era delegation) — meaning every subsequent administration inherits or fights over this authority map.
- Allied intelligence services operating under stricter national rules must decide whether to harmonize with a faster American operational tempo or firewall their own networks from US-initiated operations.
Third-order effects
- Cyberwarfare authority has become a partisan inheritance: each administration now rewrites its predecessor's classified cyber rules, as seen when Trump returned to office and signed an EO scrapping or revising several Biden- and Obama-era cybersecurity programs (the 2025 EO scrapping Biden- and Obama-era programs) — making offensive-cyber doctrine a recurring political battleground rather than settled policy.
- If operational commanders permanently hold strike authority, deterrence logic shifts from signaling restraint to demonstrating capability, pushing rival states to pre-authorize their own offensive cyber units and normalizing continuous low-level cyber conflict between major powers.
The trend: US offensive cyber authority is migrating from the White House to the Pentagon, with each successive administration rewriting its predecessor's classified rules rather than restoring them.