Technology

The White House has finalized a voluntary framework requiring major AI developers to grant the government up to 30 days of pre-release model access for cybersecurity evaluation, but the framework itself has not been publicly released and the administration has not disclosed testing metrics, reporting requirements, or which agency leads the effort. The classified benchmark that determines which models qualify as 'covered frontier models' remains undisclosed, as do the government's review conclusions and any public-results process. Officials have suggested framework participation may become a condition for federal funding eligibility, including Defense Department contracts, though no published rule confirms this.

CISA added flaws in Cisco Secure Firewall ASA/FTD, Microsoft Windows WinSock, and Metabase to its Known Exploited Vulnerabilities catalog on August 11, 2026, with federal remediation deadlines as early as August 14 for covered agencies. The Metabase vulnerability carries a CVSS score of 10.0 and allows unauthenticated attackers to inject SQL and gain administrator access, while the Cisco flaw enables remote denial-of-service and the Microsoft flaw enables local privilege escalation to SYSTEM. Patches are available for all three, and federal civilian agencies are required to remediate under BOD 26-04.