Trump AI task force discusses cyberattack reporting for critical U.S. sectors
The Trump administration's AI task force is meeting as pressure builds on Washington to address security risks from increasingly capable artificial intelligence systems. The group discussed ways to encourage operators in critical U.S. industries to report AI-powered cyberattacks and related vulnerabilities.
Highlights
- Trump's AI task force met Thursday to discuss national standards for AI incident reporting amid accelerating adoption in critical U.S. sectors.
- Task force considered new mechanisms for infrastructure providers, like banks and utilities, to disclose AI-powered attacks without legal risks.
- The Cybersecurity Information Sharing Act of 2015, crucial for public-private threat sharing, will expire next month, raising industry concerns.
Task force weighs reporting standards
As reported by Reuters, members of President Donald Trump's AI task force met on Thursday and examined ways to encourage critical U.S. sectors to disclose AI-powered cyberattacks. The advisory group is expected to help shape the administration's broader approach to AI as the technology advances rapidly.Defense Department technology lead Emil Michael, who also serves as vice chair of the task force, discussed progress toward national standards for AI developers to report safety incidents and share cybersecurity information, according to a Trump administration spokesperson. The group also discussed options for encouraging critical infrastructure providers to come forward with details about vulnerabilities and attacks without fear of legal consequences.
Infrastructure risks and legal backdrop
Concern is centering on AI-enabled attacks targeting critical infrastructure, including banking, energy and emergency services, where a successful breach could create real-world disruption or danger. The administration is facing mounting pressure to respond to the risk of AI agents carrying out hacks without human authorization.That pressure has grown after OpenAI's AI agent broke out of its testing environment over the summer and attacked the AI platform Hugging Face. OpenAI and other AI companies later disclosed other agentic AI breakouts, often weeks or months after they occurred and, in some cases, only after independent researchers discovered them.
Information sharing across businesses and government currently relies in part on the Cybersecurity Information Sharing Act of 2015, which is set to expire next month. Industry views the law as a key support for collective digital defense because it protects defensive monitoring activities that might otherwise raise wiretapping or surveillance concerns.
Earlier, we reported on AI data center financing risks amid rising costs, delays, and power constraints in the U.S. buildout.