US expands cyber powers against cartels—while Colombia deepens joint military push under ICC scrutiny

The White House says President Trump has signed a memo allowing the use of cyber tools to target transnational criminal organizations. The move signals an explicit shift from traditional law-enforcement and kinetic pressure toward cyber-enabled disruption of cartel networks. Separately, US Defense Secretary Pete Hegseth warned that the International Criminal Court (ICC) may investigate US boat strikes in Latin America. In parallel, Hegseth said Colombia has joined a regional military coalition aimed at sustaining the campaign against drug cartels. Strategically, the cluster points to a tightening of the US-led counter-cartel architecture in Latin America, combining cyber operations with joint military activity. Colombia’s authorization of joint military actions “in its fight” against drug trafficking—paired with President-elect De la Espriella’s pledge to confront “without truce” narcoterrorism and criminal organizations—raises the operational tempo and broadens the target set. The ICC warning introduces a legal and reputational constraint that could shape rules of engagement, targeting standards, and documentation practices for US and partner forces. Overall, the power dynamic favors faster operational action, but the compliance and legitimacy risks are rising as cross-border operations become more technologically and legally complex. Market and economic implications are indirect but potentially meaningful for risk premia tied to security and logistics. Intensified counter-cartel operations can affect regional shipping and border throughput, particularly in areas where trafficking routes intersect with maritime and river corridors, which can lift insurance and security costs for trade. The cyber dimension increases the probability of disruption to communications, payments, and logistics systems used by criminal networks, which can spill over into legitimate operators if controls are weak. For investors, the key watch is whether the campaign remains contained to criminal targets or triggers broader instability that would pressure local currencies, sovereign spreads, and regional equities tied to trade and consumer demand. Next, watch for implementation details: the scope of the cyber authorities, the oversight mechanism referenced in the memo, and any public guidance on target selection and deconfliction. Also monitor whether the ICC advances inquiries related to US boat strikes, and whether that leads to changes in operational procedures or coalition participation terms. In Colombia, track how quickly joint military actions are operationalized after the authorization and whether additional partners join the coalition. Trigger points include any escalation in cross-border incidents, evidence of cyber spillover affecting critical infrastructure, or formal legal actions that force a pause or narrowing of tactics.

Geopolitical Implications

• 01

  Cyber-enabled counter-crime operations are becoming a core instrument of US influence in Latin America, potentially outpacing legal and oversight frameworks.

• 02

  Colombia’s authorization of joint military actions suggests deeper security alignment with the US, increasing interoperability but also raising compliance and legitimacy risks.

• 03

  ICC involvement could constrain tactics, affect coalition politics, and create friction between operational urgency and international legal standards.

• 04

  If cyber operations broaden beyond criminal targets, the risk of spillover into civilian infrastructure could trigger diplomatic backlash and reputational costs.

Key Signals

• —Public or leaked guidance on the memo’s oversight, target criteria, and deconfliction procedures for cyber operations.
• —Whether the ICC opens or advances a formal investigation tied to US boat strikes, and any resulting changes to maritime rules of engagement.
• —Colombia’s speed and scope in operationalizing joint military actions and whether additional coalition partners are named.
• —Any reported cyber incidents affecting legitimate Colombian or regional communications, payments, or logistics systems.