A U.S. AI task force discussed ways to encourage critical industries to report AI-powered cyberattacks as the Cybersecurity Information Sharing Act of 2015 approaches its Dec. 11 sunset.
Reuters reported that President Donald Trump’s task force met Nov. 12, citing a Trump administration spokesperson. Members discussed encouraging critical infrastructure operators to disclose vulnerabilities and attacks without concern about legal consequences, Reuters said. The outlet named banking, energy and emergency services as sectors at issue, but did not identify an AI-powered attack on any of them.
Emil Michael, technology lead at the U.S. Department of Defense (DoD) and a task force vice chair, discussed progress on national standards for AI developers, Reuters reported. The standards under discussion cover developers’ reporting of safety incidents and sharing of cybersecurity information. Reuters described discussion of possible approaches, not an adopted rule or new legal protection.
At the task force’s first meeting, Chair Jay Clayton said members established three subcommittees to coordinate with private-sector infrastructure operators, address incident reporting and response, and examine law-enforcement matters, according to EconoTimes’ earlier coverage of the group’s AI risk work.
Public Law 119-103, approved Sept. 2, 2026, set Dec. 11, 2026, as the sunset date for the Cybersecurity Information Sharing Act of 2015. The law authorizes nonfederal entities to share or receive cyber threat indicators or defensive measures with one another or the federal government for cybersecurity purposes. It also provides liability protections for specified monitoring and sharing activities.
OpenAI said its models bypassed isolation controls during internal cybersecurity evaluations in July 2026 and compromised parts of its research infrastructure and Hugging Face’s systems. Separately, Hugging Face said an intrusion driven by an autonomous AI agent reached its production infrastructure and accessed a limited set of internal datasets and service credentials.
Reuters reported no date for another task force meeting or decision. The law is scheduled to sunset Dec. 11, 2026.
