https://cybersecuritytracker.ai/?cats=government-policyCurated cybersecurity news and vulnerability intelligence.Sun, 26 Jul 2026 22:32:50 GMThttps://therecord.media/andy-burnham-liz-lloyd-cyber-policy-ukcst-3193The new UK Prime Minister Keir Starmer retained Liz Lloyd in a cyber policy role, maintaining her position despite broader government restructuring. Lloyd remains one of the few Starmer allies continuing in the administration.Fri, 24 Jul 2026 17:14:00 GMThttps://cyberscoop.com/tech-leaders-open-source-ai-cybersecuritycst-3185Microsoft and more than two dozen technology companies released an open letter urging policymakers to support open-source AI systems, comparing the potential ecosystem benefits to the open-source software movement of the 1980s. The signatories argue that open-weight models enable startups, universities, and research institutions to innovate efficiently and strengthen cybersecurity defenses, though critics warn that unrestricted access could lower barriers to entry for malicious actors and enable creation of deepfakes and child sexual abuse material.Fri, 24 Jul 2026 15:22:15 GMThttps://therecord.media/visa-restrictions-cyber-scammerscst-3112The U.S. State Department, under Secretary of State Marco Rubio, announced visa restrictions targeting individuals involved in transnational cyber-scam operations. The policy aims to limit entry to the United States for those connected to international fraud schemes conducted through digital channels.Thu, 23 Jul 2026 16:29:00 GMThttps://schneier.com/blog/archives/2026/07/end-to-end-encryption-and-going-dark.htmlcst-3097A new academic paper analyzes the third round of the 'Going Dark' debate, tracing encryption policy from the 1990s Crypto Wars through current end-to-end encryption (E2EE) controversies. The authors identify five distinct E2EE technical scenarios and demonstrate that E2EE is embedded throughout modern infrastructure including Transport Layer Security, Secure Shell, Virtual Private Networks, and Zero Trust Architecture, arguing that broad restrictions would harm cybersecurity and government operations.Thu, 23 Jul 2026 11:03:50 GMThttps://cyberscoop.com/cisa-anchor-ci-critical-infrastructure-framework-op-edcst-3076The Cybersecurity and Infrastructure Security Agency (CISA) published a notice on July 1 establishing ANCHOR-CI, a new framework for government-industry collaboration on critical infrastructure protection that replaces the 20-year-old Critical Infrastructure Partnership Advisory Council (CIPAC). The new structure introduces cross-sector councils alongside traditional sector-specific councils to address threats that span multiple industries, moving beyond the siloed approach that characterized the previous model. CISA director approval of council members and streamlined advisory mechanisms aim to improve the speed and effectiveness of government-private sector coordination on emerging cyber and resilience issues.Thu, 23 Jul 2026 10:00:00 GMThttps://risky.biz/srsly-risky-biz-knives-are-out-for-open-weight-ai-modelscst-3080The Trump administration and Chinese government are both signaling plans to restrict open-weight artificial intelligence (AI) models, with the US considering adding Chinese AI companies to its Entity List and China exploring export controls on its own AI technology. White House officials including Michael Kratsios publicly accused Chinese company Moonshot AI of conducting large-scale model distillation against US AI systems to steal proprietary technology.Thu, 23 Jul 2026 07:41:22 GMThttps://cyberscoop.com/gao-report-duplicate-cybersecurity-regulations-harmonizationcst-3053A Government Accountability Office report found that 80 of 117 federal cybersecurity regulations contain duplicate reporting requirements, with seven out of 10 rules requiring written reports to agencies overlapping elsewhere. Harmonization efforts under the Biden administration have stalled under Trump, with a March 2024 executive order pausing work while the administration conducts a review. The fragmentation affects critical infrastructure sectors, which may face multiple conflicting reporting obligations depending on regulatory jurisdiction.Wed, 22 Jul 2026 21:04:43 GMThttps://therecord.media/cisa-2015-extension-passes-house-ndaacst-3052The House included a 10-year extension of the Cybersecurity Information Sharing Act (CISA) of 2015 in its fiscal 2027 defense authorization bill. The renewal maintains legal protections for organizations that voluntarily share cybersecurity threat information with government agencies and each other.Wed, 22 Jul 2026 20:39:35 GMThttps://therecord.media/france-social-media-ban-parliamentcst-3036France's Parliament has passed legislation to ban social media access for children under 15 years old, establishing France as the first European nation to implement such a restriction on platform use by minors. The vote reflects growing international momentum toward regulating social media use among younger users.Wed, 22 Jul 2026 18:00:00 GMThttps://cyberscoop.com/white-house-accuses-moonshot-ai-anthropic-model-distillationcst-3039A White House official accused Chinese company Moonshot AI of using large-scale distillation to reverse-engineer Anthropic's Fable model and create its own K3 product, leveraging sophisticated internal platforms and GB300 servers sourced through Thailand or newly acquired. The accusation highlights ongoing tensions over AI intellectual property protection, with U.S. frontier AI companies pushing for stronger safeguards against what they characterize as covert industrial model theft. Congressional committees are investigating a broader pattern of Chinese AI firms allegedly stealing proprietary U.S. frontier model capabilities and redistributing them as open-weight models globally.Wed, 22 Jul 2026 16:45:37 GMThttps://helpnetsecurity.com/2026/07/22/world-cup-2026-illegal-stream-domains-seizedcst-3007The US Department of Justice seized over 1,000 domains used to stream FIFA World Cup 2026 matches without authorization across three waves during the tournament. The enforcement operation, called Operation Offsides, removed nearly 400 domains by June and continued with additional takedowns that exceeded 1,000 total.Wed, 22 Jul 2026 10:51:38 GMThttps://wired.com/story/states-want-ice-agents-to-show-their-faces-the-trump-administration-is-blocking-themcst-3010State legislatures are proposing anti-mask laws that would require Immigration and Customs Enforcement (ICE) agents to show their faces during enforcement operations. Federal lawyers argue such mandates would endanger agents and cite a nonfunctional ICE face-recognition art project as part of their defense against the measures.Wed, 22 Jul 2026 10:30:00 GMThttps://therecord.media/jay-clayton-dni-nomination-senate-committee-approvalcst-2957The Senate Intelligence Committee voted along party lines to advance Jay Clayton's nomination to lead the Office of the Director of National Intelligence (ODNI) to the full Senate floor for consideration.Tue, 21 Jul 2026 19:00:00 GMThttps://securityweek.com/trump-orders-defense-contractors-to-map-software-suppliers-across-critical-supply-chainscst-2954The Trump administration issued an executive order requiring defense contractors to provide comprehensive visibility into their supply chains, including software dependencies, foreign ownership stakes, and cybersecurity-related supplier risks. The mandate aims to strengthen oversight of critical defense infrastructure by documenting end-to-end supplier relationships and potential vulnerabilities.Tue, 21 Jul 2026 18:16:09 GMThttps://cyberscoop.com/house-intel-bill-includes-provisions-on-state-and-local-threat-intelligence-election-security-aicst-2923The House Intelligence Committee approved a fiscal 2027 intelligence authorization bill that establishes a pilot program for sharing unclassified cyberthreat intelligence with state and local governments, requires an assessment of current information sharing practices, and mandates evaluation of foreign intelligence threats to the 2026 midterms. The measure also increases funding for artificial intelligence (AI) usage by intelligence agencies for cyber operations and strengthens protections for analysts working on foreign influence assessments. These provisions reflect ongoing tensions between the Trump administration's shift of cybersecurity responsibility to local jurisdictions and Congressional efforts to maintain federal threat intelligence coordination.Tue, 21 Jul 2026 16:25:59 GMThttps://therecord.media/taiwan-mobile-5g-speed-reductions-han-kuangcst-2922Taiwan will reduce 5G and 4G network speeds to 1 percent of normal capacity during annual civilian and military resilience exercises. The slowdown applies across much of the island during the drills.Tue, 21 Jul 2026 13:30:00 GMThttps://bleepingcomputer.com/news/security/us-seizes-over-1-000-fifa-world-cup-illegal-streaming-domainscst-2898The US Justice Department seized over 1,000 websites and blocked approximately 1,970 domains that were streaming FIFA World Cup 2026 matches without authorization. The action targeted illegal streaming infrastructure ahead of the tournament. This represents a significant enforcement effort against unauthorized sports content distribution.Tue, 21 Jul 2026 11:07:07 GMThttps://therecord.media/flock-safety-kills-audio-detection-system-human-distresscst-2874Flock Safety has discontinued the audio recognition component of its gunshot detection system, citing community feedback as a key factor in the decision to move away from the voice-oriented technology.Mon, 20 Jul 2026 19:55:00 GMThttps://cyberscoop.com/director-of-commerce-ai-standards-office-out-after-three-monthscst-2861Chris Fall has stepped down as director of the Center for AI Standards and Innovation (CAISI) at the National Institute of Standards and Technology (NIST) after three months, with NIST Director Arvind Raman assuming the acting director role. CAISI has become a key federal hub for testing frontier AI models from companies like OpenAI and Anthropic to assess cybersecurity and national security risks, including potential offensive hacking capabilities and assistance with weapons development. Fall's departure comes as the White House has elevated CAISI's work as a critical mechanism for evaluating whether new AI models represent a meaningful advance in dangerous capabilities.Mon, 20 Jul 2026 18:10:03 GMThttps://therecord.media/world-cup-illegal-streams-dojcst-2860The Department of Justice (DOJ) seized over 1,000 domains that were illegally streaming World Cup games during the tournament. The enforcement action targeted piracy operations distributing copyrighted sports content without authorization.Mon, 20 Jul 2026 17:15:00 GMThttps://techcrunch.com/2026/07/20/watch-flock-safety-ceo-garrett-langley-discuss-the-future-of-surveillance-at-techcrunch-disrupt-2026cst-2853Flock Safety CEO Garrett Langley will appear at TechCrunch Disrupt 2026 to discuss the balance between privacy and public safety in surveillance technology. The event represents a platform for examining core tensions in the surveillance industry.Mon, 20 Jul 2026 14:30:00 GMThttps://darkreading.com/cyber-risk/cybersecurity-keeps-events-uneventfulcst-2841Major global events in 2024, including the World Cup and the U.S. 250th anniversary celebration, required substantial cybersecurity measures to protect against potential threats. The article notes that these high-profile gatherings attracted worldwide attention and security-intensive operations.Mon, 20 Jul 2026 14:00:00 GMThttps://wired.com/story/the-aclu-is-arming-lawyers-to-expose-state-surveillance-secretscst-2822The American Civil Liberties Union (ACLU) has developed a toolkit for Massachusetts attorneys to help challenge police use of surveillance technologies, including facial recognition and artificial intelligence-generated reports. The toolkit aims to expose how law enforcement agencies deploy and conceal these tools during criminal investigations.Mon, 20 Jul 2026 10:00:00 GMThttps://cyberscoop.com/state-officials-election-experts-pan-trump-voter-fraud-speech-call-it-desperationcst-2770President Trump delivered a primetime speech on Thursday making claims about election interference and noncitizen voter registration, but election officials and security experts dismissed the allegations as recycled, debunked theories with no supporting evidence. Declassified documents reviewed thus far have not validated claims about Chinese interference affecting the 2020 election, and Trump's assertion about hundreds of thousands of noncitizen voters contradicts state audits consistently finding only single or double-digit numbers. Election officials and experts noted the administration provided little methodology for its citizenship verification process and criticized the approach as unreliable.Fri, 17 Jul 2026 15:37:29 GMThttps://thehackernews.com/2026/07/eu-orders-google-to-open-android-mic.htmlcst-2752The European Commission has ordered Google to grant rival AI assistants the same access to Android hardware and functionality that Gemini currently enjoys, including camera, microphone, screen content, wake-word activation, and the ability to control other applications. Google must implement these changes in Android 18, with a compliance deadline of August 1, 2027.Fri, 17 Jul 2026 11:44:41 GMThttps://thehackernews.com/2026/07/the-race-to-field-military-autonomy-is.htmlcst-2753Military organizations across the U.S., UK, and NATO are accelerating deployment of autonomous capabilities through increased investment and streamlined acquisition processes. The article introduces a shift in focus toward trusted information infrastructure to support rapid fielding of these systems.Fri, 17 Jul 2026 11:30:00 GMThttps://wired.com/story/san-francisco-demands-apple-and-google-delete-ai-nudify-apps-from-app-storescst-2750San Francisco's City Attorney sent cease-and-desist letters to Apple and Google demanding they remove 13 face-swap applications from their app stores. The apps are designed to generate non-consensual intimate imagery targeting women and girls, generating revenue for the platforms hosting them.Fri, 17 Jul 2026 10:00:00 GMThttps://therecord.media/canada-lawful-access-act-surveillance-wyden-lettercst-2729A Democratic senator has urged the Trump administration to oppose Canadian surveillance legislation that he claims would exploit American technology infrastructure. The proposal under debate in Canada has raised concerns among U.S. officials about potential misuse of cross-border systems.Thu, 16 Jul 2026 21:00:35 GMThttps://cyberscoop.com/opm-federal-rotational-cyber-workforce-program-gaocst-2719The Federal Rotational Cyber Workforce program, launched in 2022 to shuffle skilled personnel among federal agencies, enrolled only eight participants across 634 applications over its three-year run. The Government Accountability Office attributed the low uptake to declining advertised positions, applicant qualification issues, and agencies preferring internal rotations, while the Office of Personnel Management cited budgetary constraints and has discontinued the program as of summer 2026.Thu, 16 Jul 2026 19:18:19 GMThttps://therecord.media/ukraine-fedorov-drones-dismissalcst-2698Ukraine's President Volodymyr Zelensky dismissed Defense Minister Mykhailo Fedorov, who had championed the integration of drone technology and digital innovation into the military. Fedorov's removal prompted public opposition from Ukrainians who supported his technology-focused defense initiatives.Thu, 16 Jul 2026 16:00:00 GMThttps://securityweek.com/chinas-top-cybersecurity-firms-hit-by-mounting-military-procurement-banscst-2655Chinese cybersecurity firms are experiencing procurement restrictions from the country's military, though specific reasons for the bans remain undetailed in available reporting. The action reflects tensions within China's defense-industrial ecosystem regarding vendor relationships or compliance frameworks.Thu, 16 Jul 2026 08:49:27 GMThttps://therecord.media/gold-eagle-cybersecurity-vulnerabilities-clearinghousecst-2636The Trump administration introduced the Gold Eagle program, which leverages artificial intelligence to help industry, critical infrastructure operators, and government entities detect, prioritize, and patch cybersecurity vulnerabilities more rapidly. The system functions as a centralized clearinghouse for vulnerability information and remediation activities.Wed, 15 Jul 2026 20:00:00 GMThttps://cyberscoop.com/jay-clayton-dni-confirmation-hearing-election-securitycst-2621Democratic senators questioned Jay Clayton, Trump's nominee for director of national intelligence, during his Senate Intelligence Committee confirmation hearing on Wednesday regarding election security and integrity. Clayton declined to directly confirm that Joe Biden won the 2020 presidential election, saying only that it was "certified," and provided evasive responses about mail-in ballot concerns and an FBI raid of a Georgia election office. Multiple Democratic senators, including Jon Ossoff, expressed frustration with his refusal to give straightforward answers and his apparent reluctance to contradict the president's election claims.Wed, 15 Jul 2026 18:29:39 GMThttps://therecord.media/jay-clayton-odni-nominee-senate-confirmation-hearingcst-2619Senators questioned Jay Clayton, Trump's nominee for director of national intelligence, regarding his positions on the 2020 election and voter fraud claims during his confirmation hearing. The discussion dominated the hearing, overshadowing other policy topics.Wed, 15 Jul 2026 17:50:00 GMThttps://darkreading.com/cybersecurity-operations/tech-xit-uk-sovereignty-push-amid-ai-strifecst-2618The US government has imposed restrictions on frontier artificial intelligence models from Anthropic and OpenAI, prompting the UK and other nations to reconsider their dependence on American technology companies. This shift toward technology sovereignty has potential cybersecurity consequences for organizations relying on these platforms and their alternatives.Wed, 15 Jul 2026 17:03:23 GMThttps://therecord.media/lapd-halts-flock-safety-alpr-contractcst-2599The Los Angeles Police Department has suspended its partnership with Flock Safety, an automatic license plate reader (ALPR) provider. This action reflects broader municipal scrutiny of ALPR technology vendors and their practices.Wed, 15 Jul 2026 13:00:00 GMThttps://securityweek.com/us-charges-russian-individuals-and-firms-for-running-cybercrime-servicescst-2575The US Department of Justice charged Russian individuals and companies with operating cybercrime services. The defendants and their organizations had been previously sanctioned by the United States and allied nations.Wed, 15 Jul 2026 11:58:05 GMThttps://coincentral.com/coinbase-and-meta-back-doj-anti-scam-operationcst-2566Coinbase and Meta have partnered with the Department of Justice to support an anti-scam operation, though specific details of their involvement and the operation's scope are not provided in the available article text.Wed, 15 Jul 2026 08:59:24 GMThttps://cyberscoop.com/trump-gold-eagle-ai-cyber-clearinghousecst-2534The Trump administration launched Gold Eagle, a federal clearinghouse managed by Treasury to share AI-related cyber threat intelligence between government and private sector organizations. The initiative, established through a White House executive order, includes participation from DHS, DoD, CISA, open-source software providers, and critical infrastructure operators, and has already begun collecting vulnerability intelligence. Gold Eagle aims to identify, prioritize, and patch vulnerabilities using AI tools before adversaries exploit them, particularly addressing the widespread risk of insecure code and misconfigurations in open-source software.Tue, 14 Jul 2026 21:44:31 GMThttps://therecord.media/us-unseals-indictment-russians-bulletproof-hostingcst-2521The U.S. Department of Justice unsealed an indictment against alleged operators of a Russian hosting service that prosecutors claim provided infrastructure and technical support to cybercriminals. Media Land and its sister company ML Cloud, both based in St. Petersburg, are at the center of the allegations.Tue, 14 Jul 2026 19:26:00 GMThttps://cyberscoop.com/trump-administration-eac-firings-doj-election-officials-threatcst-2447State election officials are building independent security networks after the Trump administration fired Election Assistance Commission (EAC) commissioners and the Department of Justice issued threats of criminal prosecution against election officials. Federal agencies like the Cybersecurity and Infrastructure Security Agency (CISA) have reduced technical support and threat intelligence sharing with states, forcing secretaries of state to develop their own election security resources and training for county and local jurisdictions.Mon, 13 Jul 2026 20:59:31 GMThttps://helpnetsecurity.com/2026/07/13/eu-uk-russia-cyber-activity-sanctionscst-2420The EU and UK jointly imposed sanctions against Russian individuals and entities accused of coordinating a cyber ecosystem targeting Europe and its allies. The UK sanctioned 24 targets while the EU restricted nine individuals and four entities involved in cyber operations to destabilize the region.Mon, 13 Jul 2026 14:52:51 GMThttps://techcrunch.com/2026/07/13/lapd-lets-contract-with-surveillance-giant-flock-expire-citing-serious-concerns-over-civil-liberties-and-privacycst-2425The Los Angeles Police Department allowed its contract with surveillance company Flock to expire, citing civil liberties and privacy concerns. This represents a significant break from one of Flock's largest government customers over the company's surveillance capabilities.Mon, 13 Jul 2026 14:13:38 GMThttps://tenable.com/blog/fedramp-high-il5-federal-government-cloud-securitycst-2423Cloud security has become critical for federal civilian and defense agencies as environments grow more complex, shifting from adoption decisions to securing what is already deployed at scale. Modern federal cloud infrastructures featuring multi-cloud architectures, containerized workloads, and AI applications create significant risk gaps that adversaries exploit, including misconfigured storage, overprivileged accounts, and hidden lateral movement paths. Achieving mature zero trust architecture requires deep, real-time visibility across seven pillars (users, devices, applications, data, network, automation, and analytics) to enable continuous operational discipline rather than reactive risk management.Mon, 13 Jul 2026 14:00:00 GMThttps://bleepingcomputer.com/news/security/eu-and-uk-hit-russia-with-first-joint-cyber-sanctions-packagecst-2397The European Union and the United Kingdom announced joint sanctions against dozens of Russian individuals and entities, alleging that Russia coordinated a network of hacking groups conducting cyberattacks across Europe. The action represents an escalation in Western responses to Russian state-sponsored cyber operations.Mon, 13 Jul 2026 11:19:05 GMThttps://securityweek.com/eu-targets-russian-intelligence-officers-accused-of-running-a-yearslong-cyber-spying-campaigncst-2387The European Union imposed sanctions against Russian intelligence officers accused of operating a prolonged cyber espionage and sabotage campaign. The targeted network allegedly conducted surveillance against government entities and critical infrastructure operations.Mon, 13 Jul 2026 10:00:00 GMThttps://therecord.media/russia-blamed-for-poland-grid-cyberattack-in-joint-uk-eu-sanctions-packagecst-2417The UK and EU have jointly sanctioned Center 16, Russia's FSB signals intelligence unit, for conducting cyber attacks against Poland's energy sector and water treatment facilities. The sanctions represent the allies' first coordinated response to Russian cyber threats and encompass a broader pattern of escalating malicious cyber activity.Sun, 12 Jul 2026 23:00:00 GMThttps://darkreading.com/cybersecurity-operations/jen-ellis-connecting-cyber-community-political-machinerycst-2350This article profiles Jen Ellis, who recently received an MBE honor. The piece examines the events and advocacy work that led to her recognition within the security research community.Fri, 10 Jul 2026 19:08:04 GMThttps://therecord.media/license-plate-cameras-may-be-next-target-after-supreme-court-reins-in-location-trackingcst-2347The Supreme Court's recent restrictions on location tracking may extend to automatic license plate recognition (ALPR) systems, potentially requiring warrants for ALPR searches. Such a requirement would significantly constrain how law enforcement agencies deploy these camera networks in routine policing.Fri, 10 Jul 2026 16:50:00 GMThttps://microsoft.com/en-us/security/blog/2026/07/10/securing-our-future-july-2026-progress-report-on-microsofts-secure-future-initiativecst-2348Microsoft's Secure Future Initiative July 2026 progress report details advances across three areas: strengthening security foundations through identity controls and asset management, deploying AI-driven proactive defense to detect vulnerabilities faster than manual methods, and preparing for future threats such as quantum computing. The initiative emphasizes that durable security foundations require continuous validation rather than periodic audits, and demonstrates results including 99.97% phishing-resistant multifactor authentication coverage and remediation of over 550,000 critical and high-risk open-source vulnerabilities.Fri, 10 Jul 2026 16:00:00 GMT