President Trump authorises vetted private companies to conduct offensive cyber operations against foreign criminal networks, marking a significant shift in US cyber policy and sparking industry debate.