Loading story…
The U.S. Department of Defense published an Artificial Intelligence Strategy outlining how the department intends to integrate AI into defense operations, signaling continued federal investment in AI for mission support, decision-making, and modernization. The strategy places AI within a national security context, underscoring the government’s interest in accelerating adoption while managing operational and security risks tied to advanced models and data-driven systems.
At the same time, policy debate intensified over proposed AI model theft legislation, with critics arguing the bill should be revised before becoming law. The public discussion highlights growing concern that AI systems are becoming both strategic assets and potential theft targets, raising questions for security leaders about intellectual property protection, model security, insider risk, and how future regulation could affect the development, deployment, and safeguarding of sensitive AI capabilities.
Track how attackers are adapting to this technology.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The U.S. government is intensifying efforts to secure artificial intelligence systems against foreign threats, with legislative and operational initiatives underway. A bipartisan bill, the Advanced AI Security Readiness Act, has been introduced to require the National Security Agency to develop a comprehensive security playbook for protecting federal AI systems. This playbook will address vulnerabilities such as model-weight theft, insider threats, and cyberespionage, and will involve collaboration with major AI developers, national laboratories, and multiple federal agencies. The move follows recent NSA publications on AI security and reflects growing concern over adversaries seeking to exploit American AI innovation. In parallel, the Defense Logistics Agency is accelerating the adoption of AI tools across its operations, emphasizing the need to keep pace with adversaries like China and Russia. The agency's CIO highlighted the importance of Pentagon-wide AI integration to maintain a technological edge in defense logistics. These developments underscore a coordinated federal approach to both leveraging and securing AI technologies in critical government functions.
Jul 12, 2026
Governments, regulators, and major AI developers moved to formalize oversight of advanced AI systems as concerns grew that frontier and agentic models could accelerate cyberattacks, create liability exposure, and outpace existing governance. In the United States, **NIST** expanded work on AI security through its `AI Agent Standards Initiative`, the `Cyber AI Profile`, and the Commerce Department’s **Center for AI Standards and Innovation (CAISI)**, while Google, Microsoft, xAI, OpenAI, and Anthropic agreed to voluntary pre-release model testing with the government. The White House debated a broader executive order after reports that models such as Anthropic’s **Mythos** and OpenAI’s cyber-focused systems could rapidly identify vulnerabilities and support complex offensive operations; the final order reportedly shortened the review window and paired model access with an AI cybersecurity clearinghouse and vulnerability-sharing measures for critical infrastructure defenders. At the same time, Europe and U.S. states advanced a patchwork of AI governance rules that mixed delayed enforcement with tougher operational expectations. The EU agreed to simplify parts of the **AI Act**, delaying some high-risk obligations while banning nudification tools and preserving strong powers for the Commission’s AI Office over general-purpose AI, even as guidance on high-risk classification and logging requirements continued to emerge. States including Illinois, Utah, Maryland, and San Jose expanded governance-first programs through chief AI officers, sandboxes, incident-investigation frameworks, red teaming, and procurement controls, while insurers, auditors, and legal experts warned that **AI-washing**, weak board oversight, poor logging, and inadequate vendor controls are increasing D&O, regulatory, and tort risk. Across policy, industry, and academia, the direction of travel was toward stronger **auditing, verification, incident reporting, and lifecycle governance** rather than reliance on voluntary model promises alone.
Aug 1, 2026
The White House Office of the National Cyber Director (ONCD) said a forthcoming U.S. national cyber strategy will prioritize **rapid but secure adoption of AI** for cyber defense, aiming to expand the use of AI-enabled tools to *detect, divert, and deceive* threat actors without unintentionally widening the attack surface. ONCD policy lead Alexandra Seymour also highlighted plans to advance U.S. **AI cybersecurity standards**, establish industry best practices for secure AI deployment, and pursue “counter-AI” efforts to protect frontier models and counter adversary use of AI. The strategy is also expected to include a pillar focused on strengthening the cybersecurity workforce by aligning curriculum, workforce standards, cyber literacy, and job placement across government, industry, and academia. Separately, ONCD indicated U.S. cyber responses will be more explicitly **linked to adversary actions** and will require closer coordination with **state/local governments and critical infrastructure owners/operators**, reflecting a more assertive posture driven in part by recent high-profile intrusions into U.S. critical infrastructure (including telecom). In parallel with these federal strategy signals, the U.S. Treasury Department announced it will publish a set of resources created by a public-private coalition to improve **cyber risk management for AI systems in the financial sector**, intended to support secure AI adoption as banks expand AI use for fraud detection, customer service, trading, and risk modeling—areas that can introduce new vulnerabilities due to sensitive data dependencies and third-party/vendor exposure.
Jun 29, 2026