Loading story…
California Governor Gavin Newsom signed SB 813 and AB 1405, creating a statewide framework for independent third-party assessments of artificial-intelligence systems. SB 813 authorizes independent verification organizations to evaluate AI systems and models for compliance with California law, while AB 1405 establishes a state registry for AI auditors and requires standards for auditor independence, transparency, and integrity.
The measures expand California’s AI safeguards as the state deploys AI in resident services, agency operations, and potentially critical infrastructure. California is advancing the AskCA resident-services assistant, Anthropic Claude tools for agencies, and internal testing of the Poppy assistant, while increasing oversight of AI vendors seeking state contracts. Newsom described the laws as part of responsible AI innovation and called for corresponding federal action.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Newsom called on the U.S. federal government to enact robust nationwide AI regulation while California expanded its AI safeguards.
California Governor Gavin Newsom signed SB 813 and AB 1405. The laws authorize independent verification of AI systems for compliance with California law and establish a state registry and independence, transparency, and integrity standards for AI auditors.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
statescoop.com
Open sourcegov.ca.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
California Governor Gavin Newsom announced a statewide cybersecurity initiative requiring every state agency to appoint an **AI cybersecurity officer** and stand up an AI-focused cyber defense program. The effort will be housed in the California Cybersecurity Integration Center and is intended to apply artificial intelligence to vulnerability detection, network hardening, and incident response as officials respond to increasingly sophisticated threats. State leaders said the program is also meant to expand access to advanced cyber capabilities for local governments and critical infrastructure operators. The announcement followed a coordinated cyberattack that disrupted water utility IT systems across multiple U.S. states and was paired with criticism of reduced federal cybersecurity support, including reported cuts to CISA funding and the end of support for the Multi-State Information Sharing and Analysis Center.
Aug 14, 2026
Governments, regulators, and major AI developers moved to formalize oversight of advanced AI systems as concerns grew that frontier and agentic models could accelerate cyberattacks, create liability exposure, and outpace existing governance. In the United States, **NIST** expanded work on AI security through its `AI Agent Standards Initiative`, the `Cyber AI Profile`, and the Commerce Department’s **Center for AI Standards and Innovation (CAISI)**, while Google, Microsoft, xAI, OpenAI, and Anthropic agreed to voluntary pre-release model testing with the government. The White House debated a broader executive order after reports that models such as Anthropic’s **Mythos** and OpenAI’s cyber-focused systems could rapidly identify vulnerabilities and support complex offensive operations; the final order reportedly shortened the review window and paired model access with an AI cybersecurity clearinghouse and vulnerability-sharing measures for critical infrastructure defenders. At the same time, Europe and U.S. states advanced a patchwork of AI governance rules that mixed delayed enforcement with tougher operational expectations. The EU agreed to simplify parts of the **AI Act**, delaying some high-risk obligations while banning nudification tools and preserving strong powers for the Commission’s AI Office over general-purpose AI, even as guidance on high-risk classification and logging requirements continued to emerge. States including Illinois, Utah, Maryland, and San Jose expanded governance-first programs through chief AI officers, sandboxes, incident-investigation frameworks, red teaming, and procurement controls, while insurers, auditors, and legal experts warned that **AI-washing**, weak board oversight, poor logging, and inadequate vendor controls are increasing D&O, regulatory, and tort risk. Across policy, industry, and academia, the direction of travel was toward stronger **auditing, verification, incident reporting, and lifecycle governance** rather than reliance on voluntary model promises alone.
Aug 1, 2026
Illinois, New York, and California have advanced frontier AI laws that would require major model developers to implement safety frameworks, disclose risks, report incidents, and in some cases undergo independent audits, creating a patchwork of state obligations as the United States lacks a comprehensive federal regime. The measures target highly capable models increasingly used in critical infrastructure and other sensitive environments, where policymakers and security leaders warn they could enable cyber abuse such as autonomous zero-day exploitation, guardrail evasion, deception by agentic systems, and AI-assisted ransomware. At the same time, pressure is building for a broader U.S. oversight structure for frontier models. Google DeepMind CEO Demis Hassabis called for an independent, expert-led body to evaluate advanced AI systems before release, while OpenAI said the Trump administration is developing a federal cyber-testing framework for highly capable models and argued that national institutions should lead audits, incident reporting, security standards, and whistleblower protections. Together, the proposals point toward a de facto national baseline for frontier AI governance, though unresolved questions remain around fragmented state compliance, technical rigor, transparency, and how rules would apply to downstream users and modified or embedded models.
Jul 15, 2026