Loading story…
The US Department of Defense has officially launched GenAI.mil, a generative artificial intelligence platform designed for military use and powered by Google’s Gemini AI application. Secretary of Defense Pete Hegseth issued a memorandum instructing all military personnel, civilians, and contractors to immediately incorporate the platform into their daily workflows, emphasizing its role in maintaining a technological edge over adversaries. GenAI.mil is authorized to handle controlled unclassified information and is accessible from all Pentagon and global military base desktops, with plans to expand its capabilities by integrating additional advanced AI models in the future.
The platform offers features such as natural language conversation, retrieval-augmented generation (RAG), and secure web access, while meeting stringent security requirements including CUI and IL5 certifications for operational environments. The Department of Defense is also rolling out free AI training programs for all staff to maximize adoption and operational effectiveness. This initiative is part of a broader strategy to transform the DoD into an "AI-first" organization, aligning with recent White House directives to secure US leadership in AI-driven defense capabilities.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Alongside the launch, Hegseth issued guidance instructing the Defense Department to adopt the military AI platform in daily operations. The platform was authorized to handle controlled unclassified information, and officials said additional enterprise AI applications would be added in the future.
On December 9, 2025, Secretary of Defense Pete Hegseth announced GenAI.mil, a generative AI platform for the U.S. Department of Defense that leverages Google's Gemini AI application. The platform was introduced for document writing, research, and daily workflow use across military personnel, civilians, and contractors.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The U.S. Department of Defense has added **ChatGPT Mil**, a dedicated OpenAI deployment, and xAI's **Grok for Government** to its GenAI.mil enterprise portal alongside Google Gemini. The platform is intended to provide more than 3 million military personnel, civilian employees, and contractors with approved generative-AI tools for unclassified and controlled-unclassified-information work, including planning, policy, logistics, administration, and document processing. ChatGPT Mil operates separately from OpenAI's commercial service; DISA is building its environment and the NSA is assessing intrusion and containment risks. ChatGPT Mil and Grok for Government reportedly received Impact Level 5 authorization, allowing their environments to store and process sensitive, non-public unclassified data. Pentagon and OpenAI officials said the GenAI.mil deployments are not intended for combat use because of operational and connectivity constraints, while the department continues evaluating AI for operational applications. The multi-vendor strategy is designed to provide distinct frontier-model capabilities without vendor lock-in; Anthropic's Claude was not included following a dispute over restrictions on mass surveillance and lethal autonomous weapons.
Aug 31, 2026
The Pentagon is rapidly expanding its use of generative AI across the Department of Defense, with officials saying adoption of the `GenAI.mil` platform has surged from about 80,000 users in late 2025 to roughly 1.5 million by June 2026, out of a workforce of around 3.5 million. Defense officials said the platform is already being used for administrative work including evaluation reports, medal citations, counseling statements, and reports mandated by Congress, while the department has also signed agreements with major AI vendors to deploy tools on classified networks for lawful operational use. OpenAI said `ChatGPT` will be added to `GenAI.mil` in early July for more than 3 million civilian and military personnel, with certifications for controlled unclassified information and `Impact Level 5`. The expansion has drawn scrutiny because AI-generated submissions to Congress could contain errors or mischaracterizations that weaken oversight of military spending, particularly as the Defense Department seeks a record **$1.5 trillion** budget for fiscal year 2027; officials also noted that more than 100,000 AI agents have already been built on the platform as demand grows for higher token capacity and more efficient model use.
Jul 12, 2026
Google's Threat Intelligence Group (GTIG) has identified a significant evolution in cybercriminal and nation-state tactics, with adversaries now leveraging Gemini AI to develop advanced malware and data processing agents. Notably, groups such as APT42 have experimented with Gemini to create a 'Thinking Robot' malware module capable of rewriting its own code during execution to evade detection, as well as AI agents that process and analyze sensitive personal data for surveillance and intelligence gathering. These developments mark a shift from previous uses of AI for productivity, such as phishing and translation, to direct integration of AI into malware operations. The experimental PromptFlux malware dropper exemplifies this trend, utilizing Gemini to dynamically generate obfuscated VBScript variants and periodically update its code to bypass antivirus defenses. PromptFlux attempts persistence via Startup folder entries and spreads through removable drives and network shares, while its 'Thinking Robot' module queries Gemini for new evasion techniques. Although PromptFlux is still in early development and not yet capable of causing significant harm, Google has proactively disabled its access to the Gemini API. Other AI-powered malware, such as FruitShell, have also been observed, indicating a broader move toward AI-driven, self-modifying threats in the wild.
Jun 29, 2026