Trump Administration Cyber Strategy Emphasizes Secure AI Adoption and Industry Coordination
The White House Office of the National Cyber Director (ONCD) said a forthcoming U.S. national cyber strategy will prioritize rapid but secure adoption of AI for cyber defense, aiming to expand the use of AI-enabled tools to detect, divert, and deceive threat actors without unintentionally widening the attack surface. ONCD policy lead Alexandra Seymour also highlighted plans to advance U.S. AI cybersecurity standards, establish industry best practices for secure AI deployment, and pursue “counter-AI” efforts to protect frontier models and counter adversary use of AI. The strategy is also expected to include a pillar focused on strengthening the cybersecurity workforce by aligning curriculum, workforce standards, cyber literacy, and job placement across government, industry, and academia.
Separately, ONCD indicated U.S. cyber responses will be more explicitly linked to adversary actions and will require closer coordination with state/local governments and critical infrastructure owners/operators, reflecting a more assertive posture driven in part by recent high-profile intrusions into U.S. critical infrastructure (including telecom). In parallel with these federal strategy signals, the U.S. Treasury Department announced it will publish a set of resources created by a public-private coalition to improve cyber risk management for AI systems in the financial sector, intended to support secure AI adoption as banks expand AI use for fraud detection, customer service, trading, and risk modeling—areas that can introduce new vulnerabilities due to sensitive data dependencies and third-party/vendor exposure.
Timeline
Feb 19, 2026
ONCD official details AI defense and workforce priorities for cyber strategy
An Office of the National Cyber Director official said the Trump administration plans to expand AI-enabled cyber defense tools while reducing AI-related risk and countering adversary AI. The official also described a workforce initiative to better align cyber talent pipelines across government, industry, academia, and emerging-technology sectors.
Feb 19, 2026
White House outlines linked cyber response doctrine in upcoming strategy
A senior White House cyber official said future U.S. cyber responses will be explicitly tied to adversary actions and coordinated with industry, state, and local partners. The official said this approach will be codified in a forthcoming national cyber strategy built around six pillars.
Feb 18, 2026
Treasury announces phased release of six AI cyber risk resources
The U.S. Treasury Department announced it would publish six resources through the rest of February 2026 to help financial-sector stakeholders strengthen cybersecurity and risk management for AI systems. The guidance is intended to support secure AI adoption across areas including governance, data, transparency, fraud, and digital identity.
Jul 1, 2025
White House AI Action Plan establishes AI Executive Oversight Group
In July 2025, the White House released its AI Action Plan, under which the Artificial Intelligence Executive Oversight Group was formed as a public-private coalition. The group later developed cybersecurity and risk-management resources for AI use in the financial sector.
See the full picture in Mallory
Mallory subscribers get deeper analysis on every story, including:
Who’s affected and how
Deep-dive technical analysis
Actionable next steps for your team
IPs, domains, hashes, and more
Ask questions and take action on every story
Filter by topic, classification, timeframe
Get matching stories delivered automatically
Related Entities
Organizations
Sources
Related Stories
US Push to Export AI Cybersecurity Standards and Norms
The **Office of the National Cyber Director (ONCD)** said the US government is pursuing diplomacy to encourage other countries to adopt **American AI cybersecurity standards and norms**, positioning secure AI deployment as part of a broader effort to advance US AI leadership. Alexandra Seymour, the ONCD’s principal deputy assistant national cyber director for policy, said the administration plans to promote industry best practices for secure AI deployment and to accelerate adoption of **AI-enabled defensive tools** to “detect, divert and deceive” threat actors targeting critical systems, alongside continued federal network modernization and preparation for **post-quantum cryptography**. Seymour’s remarks were delivered at the *Identity, Authentication, and the Road Ahead Policy Forum* and were framed as consistent with themes in the administration’s **AI Action Plan**, including a role for the Departments of Commerce and State in advocating international governance approaches aligned with US values and countering authoritarian influence. Reporting also noted that some internationally oriented guidance has already been issued (including releases in May and December) and that other governments are similarly seeking to shape global AI security standards, while a forthcoming national cybersecurity strategy is expected to further address AI’s role in defending federal networks.
1 months ago
US Government Pushes Cybersecurity and AI Resilience for Critical Infrastructure
The U.S. government is advancing multiple **critical infrastructure cybersecurity** initiatives focused on resilience, public-private coordination, and the secure adoption of **AI**. National Cyber Director Sean Cairncross said the administration wants AI to be **secure by design**, framing technical security as an enabler of innovation rather than a barrier. The approach includes closer collaboration with private industry, expanded threat-information sharing, federal support for offensive cyber operations, and new mechanisms for AI companies to coordinate on threat response while the administration revises earlier policies it views as constraining competitiveness. The Department of Energy is preparing to release its first cybersecurity strategic plan to strengthen defenses for the **power grid** and improve preparedness for cyber and physical incidents affecting the energy sector. That effort is expected to deepen coordination with private operators and evaluate AI investments that could help defend critical infrastructure against AI-enabled threats. A separate article on why attacks against critical national infrastructure are dangerous is **not about this same policy development**; it is a general explainer on infrastructure targeting and disruption rather than reporting on the U.S. government’s current AI and energy cybersecurity initiatives.
2 weeks ago
US government and industry expand AI and critical-infrastructure cyber information sharing efforts
US cybersecurity officials said work is underway to stand up new and expanded government–industry mechanisms for sharing threat intelligence, with a particular focus on **AI security** and **operational technology (OT)** risks to critical infrastructure. CISA executive assistant director Nick Andersen said an **AI Information-Sharing and Analysis Center (AI-ISAC)** ordered by the White House is still in an “ongoing policy dialogue” phase, with stakeholders trying to resource the effort and avoid duplicating existing private-sector information-sharing initiatives; he also said there is no launch timeline and described the effort as moving through a “pre-decisional” process. In parallel, Andersen said DHS/CISA is planning a replacement for the disbanded **Critical Infrastructure Partnership Advisory Council (CIPAC)**, aiming to correct gaps in the prior structure—particularly the lack of an explicit cybersecurity charter—and to enable more targeted focus groups on issues such as **undersea cables** and OT systems. Separately, the White House Office of the National Cyber Director said it is developing an **AI security policy framework** intended to embed security controls into AI “tech stacks” in coordination with the Office of Science and Technology Policy, citing risks such as **data poisoning** and the potential for **agentic** capabilities to accelerate intrusions. In the private sector, the **Manufacturing ISAC (MFG-ISAC)** reported increased collaboration to address rising threats to manufacturing, including OT-focused initiatives such as tabletop exercises, OT training, and development of incident response playbooks and OT threat guidelines, alongside preparation for updated **CMMC** requirements—reinforcing the broader push toward structured, sector-based information sharing and readiness for critical-infrastructure cyber threats.
1 months ago