Risky Bulletin Srsly Risky Biz: Google sharpens its cyber knife
Sep 4, 2025
Google's new cyber disruption unit marks a bold shift in how the private sector can combat online threats. Multiple countries are linking the Salt Typhoon cyber campaign to Chinese firms, raising questions about accountability. Additionally, Apple's ongoing dispute with the UK over iCloud encryption highlights the complex legal landscape tech companies face. The discussion also dives into the ethics of hacking back, emphasizing the need for clear legal frameworks to empower firms in defending against cyber attacks.
AI Snips
Chapters
Transcript
Episode notes
Google Moves Toward Offensive Cyber Work
- Google forming a cyber disruption unit signals private sector will take on more proactive offensive roles in cyberspace.
- This follows a broader shift toward companies doing more disruptive operations rather than waiting for government action.
Legal Template From Microsoft Guides Action
- Microsoft set a legal template for disruptive actions by obtaining court authorizations to take down malicious infrastructure.
- Google may replicate and scale that model rather than start unrestricted hacking back.
Use Terms And Law To Enable Action
- Companies should leverage product control and terms of service to enable targeted defensive disruption of abuse.
- Tailor actions carefully and get legal sign-off to manage the operational and reputational risks.