Loading story…
The General Services Administration and the National Institute of Standards and Technology launched a partnership to create standardized methods for evaluating AI models and services before they are used in federal operations, aiming to give agencies common benchmarks, testing procedures, and onboarding resources through NIST’s Center for AI Standards and Innovation. The effort is designed to support broader federal AI adoption, including USAi.gov and GSA’s marketplace strategy, while the White House has separately pushed agencies to buy large language models that are truthful, neutral, and free from bias under OMB memo M-26-04.
At the same time, the administration’s emerging AI governance framework has drawn criticism from legal analysts, trade groups, and civil liberties advocates. GSA’s draft procurement clause GSAR 552.239-7001 has been criticized as overly broad for restricting vendor use of government data, imposing portability and evaluation rights, extending compliance obligations across the AI supply chain, and requiring “American AI Systems,” while industry groups warn it could create surveillance and profiling risks, clash with vendor terms, weaken intellectual property protections, and deter commercial providers from serving the government. Analysts have also warned that the White House bias memo relies too heavily on vendor self-assessments and lacks independent verification, leaving gaps in accountability as lawmakers simultaneously advance stricter AI safeguards elsewhere, including a Senate bill to bar minors from interacting with AI companions and to require age checks and disclosure rules for such systems.
Track how attackers are adapting to this technology.
6 events from the most recent confirmed update back to the earliest known activity.
The Senate Judiciary Committee advanced the bipartisan GUARD Act, which would bar minors from interacting with AI companions and require disclosures and age verification for users.
The article says 16-year-old Adam Raine died in April 2025, and lawmakers later used the case to support legislation targeting AI companions for minors.
The article says 14-year-old Sewell Setzer died in February 2024, and lawmakers later cited the case as an example of harms linked to chatbot interactions with minors.
Lawfare reports that on December 11, the White House Office of Management and Budget issued memorandum M-26-04 directing agencies to procure large language models that are truthful, neutral, and free from bias.
The General Services Administration and the National Institute of Standards and Technology announced a partnership to create consistent testing methods, benchmarks, and onboarding resources for evaluating AI models and services before federal operational use.
Nextgov says the GSA-NIST standards effort aligns with broader Trump administration AI priorities, including the July 2025 AI Action Plan.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
5 references tracked. Mallory keeps watching after this page renders.
therecord.media
Open sourcenextgov.com
Open sourcelawfaremedia.org
Open sourcenextgov.com
Open sourcelawfaremedia.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Governments, regulators, and major AI developers moved to formalize oversight of advanced AI systems as concerns grew that frontier and agentic models could accelerate cyberattacks, create liability exposure, and outpace existing governance. In the United States, **NIST** expanded work on AI security through its `AI Agent Standards Initiative`, the `Cyber AI Profile`, and the Commerce Department’s **Center for AI Standards and Innovation (CAISI)**, while Google, Microsoft, xAI, OpenAI, and Anthropic agreed to voluntary pre-release model testing with the government. The White House debated a broader executive order after reports that models such as Anthropic’s **Mythos** and OpenAI’s cyber-focused systems could rapidly identify vulnerabilities and support complex offensive operations; the final order reportedly shortened the review window and paired model access with an AI cybersecurity clearinghouse and vulnerability-sharing measures for critical infrastructure defenders. At the same time, Europe and U.S. states advanced a patchwork of AI governance rules that mixed delayed enforcement with tougher operational expectations. The EU agreed to simplify parts of the **AI Act**, delaying some high-risk obligations while banning nudification tools and preserving strong powers for the Commission’s AI Office over general-purpose AI, even as guidance on high-risk classification and logging requirements continued to emerge. States including Illinois, Utah, Maryland, and San Jose expanded governance-first programs through chief AI officers, sandboxes, incident-investigation frameworks, red teaming, and procurement controls, while insurers, auditors, and legal experts warned that **AI-washing**, weak board oversight, poor logging, and inadequate vendor controls are increasing D&O, regulatory, and tort risk. Across policy, industry, and academia, the direction of travel was toward stronger **auditing, verification, incident reporting, and lifecycle governance** rather than reliance on voluntary model promises alone.
Aug 1, 2026
The White House has finalized a voluntary framework for reviewing advanced AI models for safety and cybersecurity risks, reportedly asking companies to submit models up to 30 days before release under a June executive order. The Trump administration plans to limit the framework and its testing criteria to a small group of technology companies rather than publish them; open-weight models may also be exempt, leaving a significant class of powerful systems outside the process. Protect Democracy warned that nonpublic review rules could enable political favoritism or corruption and prevent meaningful scrutiny of whether agencies are conducting current, adequate cybersecurity testing. The group cited an OpenAI model’s reported hacking of Hugging Face as evidence of growing AI-enabled cyber risk, while Democratic lawmakers Greg Casar and Josh Becker called for transparency; Becker pointed to California’s proposed `SB 813`, which would publicly disclose AI-risk evaluation standards and methodologies.
Sep 3, 2026
The U.S. government is intensifying efforts to secure artificial intelligence systems against foreign threats, with legislative and operational initiatives underway. A bipartisan bill, the Advanced AI Security Readiness Act, has been introduced to require the National Security Agency to develop a comprehensive security playbook for protecting federal AI systems. This playbook will address vulnerabilities such as model-weight theft, insider threats, and cyberespionage, and will involve collaboration with major AI developers, national laboratories, and multiple federal agencies. The move follows recent NSA publications on AI security and reflects growing concern over adversaries seeking to exploit American AI innovation. In parallel, the Defense Logistics Agency is accelerating the adoption of AI tools across its operations, emphasizing the need to keep pace with adversaries like China and Russia. The agency's CIO highlighted the importance of Pentagon-wide AI integration to maintain a technological edge in defense logistics. These developments underscore a coordinated federal approach to both leveraging and securing AI technologies in critical government functions.
Jul 12, 2026