Having private companies “hack back” against their attackers in cyberspace has always been a controversial idea. It is also illegal in the United States. Companies should instead rely on the U.S.