The agreement is an unprecedented move expected to boost responses to cybercrime, but activists and experts have warned about possible abuses from its vague language.