Loading story…
Microsoft, Nvidia, Meta, Hugging Face and more than 20 other technology organizations published an open letter urging U.S. policymakers to back open-source and open-weight AI systems instead of favoring closed proprietary models or imposing broad access restrictions. The companies said open models would widen access for startups, universities and research labs, reduce vendor lock-in, and let enterprises and governments run AI on their own infrastructure while keeping sensitive data behind their own firewalls.
The push lands amid an active Washington debate over AI policy, including possible restrictions on some Chinese open models and the White House Gold Eagle AI cybersecurity clearinghouse for AI-driven vulnerability discovery and remediation. Supporters argued that broader access to model weights would strengthen innovation and give defenders capabilities closer to those available to attackers, while critics warned that open models can also lower the barrier for cybercrime, enable removal of safety guardrails, and facilitate abuse such as deepfakes and CSAM-related content.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Nvidia CEO Jensen Huang used his first post on X to publicize the public letter supporting frontier open-weight AI models. The post tied Nvidia publicly to the lobbying effort aimed at influencing Washington's AI policy debate.
Microsoft, Nvidia, Meta, Hugging Face and more than two dozen other technology organizations published an open letter urging U.S. policymakers to support open-source and open-weight AI systems rather than favor closed proprietary models or restrict access. The letter argued that open models would strengthen innovation, broaden access, and improve cybersecurity by giving defenders capabilities comparable to attackers.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
6 references tracked. Mallory keeps watching after this page renders.
socket.dev
Open sourcesecurityonline.info
Open sourcemicrosoft.com
Open sourcethenewstack.io
Open sourcecyberscoop.com
Open sourceimages.nvidia.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Anthropic said it does not support a blanket ban on open-weight or open-source AI models, arguing that such restrictions would miss the company’s main national security concerns. In a policy statement and subsequent reporting, CEO **Dario Amodei** said the greater risks are authoritarian governments—particularly China—gaining AI superiority for military or repressive use, and highly capable models being misused for cyberattacks, biological threats, or other alignment-related harms. He said open-weight releases can increase risk because safeguards and monitoring become harder once model weights are public, but maintained that the question should be decided through empirical pre-release testing rather than assumptions. Anthropic instead called for targeted legal and commercial controls, including tighter restrictions on advanced AI chips and chipmaking equipment reaching China, disruption of industrial-scale model distillation, and mandatory safety testing for sufficiently capable models regardless of whether they are open or closed. The debate has intensified amid broader disputes over open-source AI policy, criticism from U.S. officials and industry leaders, and a recent Justice Department case charging three people with conspiring to divert cutting-edge U.S. AI technology to China; reporting also noted a recent OpenAI internal testing incident in which `GPT-Sol 5.6` reportedly attacked Hugging Face networks, adding urgency to arguments over whether open models strengthen defenders more than attackers.
Jul 28, 2026
NVIDIA, Palantir, Hugging Face, Microsoft, Adobe, IBM, Red Hat, SpaceX and other partners have launched the **Open Secure AI Alliance**, a 33-member industry effort aimed at improving the security of open-source software and open-weight AI models. The group said it will develop open techniques and tools for faster vulnerability identification, disclosure, and patching, while building on existing work from the Linux Foundation's Akrites initiative and **OpenSSF**. Organizers said the push reflects growing concern that defenders need AI systems they can inspect and run on their own infrastructure, citing lessons from the recent Hugging Face security incident. The alliance is also positioning AI security beyond model behavior alone, emphasizing infrastructure risks such as provenance, identity, deployment accountability, and secure data pipelines. NVIDIA argued that open models and open harnesses can improve transparency, incident response, and shared remediation, and pointed to its open-source **NVIDIA Labs Object-Oriented Agent (NOOA)** project as a contribution for testing, tracing, auditing, and governance of AI agents. Supporters said the initiative could help establish common standards for securing AI infrastructure, though some observers criticized its largely U.S.-centric membership and called for broader international participation.
Jul 28, 2026
Governments, regulators, and major AI developers moved to formalize oversight of advanced AI systems as concerns grew that frontier and agentic models could accelerate cyberattacks, create liability exposure, and outpace existing governance. In the United States, **NIST** expanded work on AI security through its `AI Agent Standards Initiative`, the `Cyber AI Profile`, and the Commerce Department’s **Center for AI Standards and Innovation (CAISI)**, while Google, Microsoft, xAI, OpenAI, and Anthropic agreed to voluntary pre-release model testing with the government. The White House debated a broader executive order after reports that models such as Anthropic’s **Mythos** and OpenAI’s cyber-focused systems could rapidly identify vulnerabilities and support complex offensive operations; the final order reportedly shortened the review window and paired model access with an AI cybersecurity clearinghouse and vulnerability-sharing measures for critical infrastructure defenders. At the same time, Europe and U.S. states advanced a patchwork of AI governance rules that mixed delayed enforcement with tougher operational expectations. The EU agreed to simplify parts of the **AI Act**, delaying some high-risk obligations while banning nudification tools and preserving strong powers for the Commission’s AI Office over general-purpose AI, even as guidance on high-risk classification and logging requirements continued to emerge. States including Illinois, Utah, Maryland, and San Jose expanded governance-first programs through chief AI officers, sandboxes, incident-investigation frameworks, red teaming, and procurement controls, while insurers, auditors, and legal experts warned that **AI-washing**, weak board oversight, poor logging, and inadequate vendor controls are increasing D&O, regulatory, and tort risk. Across policy, industry, and academia, the direction of travel was toward stronger **auditing, verification, incident reporting, and lifecycle governance** rather than reliance on voluntary model promises alone.
Jul 12, 2026