Loading story…
The White House has launched Gold Eagle, a federal AI-backed clearinghouse designed to collect software vulnerability findings from government and industry, prioritize the most consequential flaws, and coordinate remediation across critical infrastructure. Created under a June 2 executive order, the initiative brings together the White House, CISA, the Departments of Treasury, Homeland Security, and Defense, along with open-source software organizations and critical infrastructure operators. Administration officials said the program is already processing vulnerability reports and using AI to help identify weaknesses, share threat intelligence, and accelerate patching before attackers can exploit them.
The announcement positions Gold Eagle as a coordination mechanism rather than a mandate for companies to fix vulnerabilities, and several operational details remain undisclosed. Officials have not identified all participating companies, explained who will handle day-to-day operations, or detailed how sensitive vulnerability data will be protected, and they have not said whether any processed findings have yet resulted in completed patches. The effort comes as federal agencies push faster remediation timelines for high-risk flaws and as policymakers warn that increasingly capable AI models could speed vulnerability discovery and exploit development, particularly in widely used open-source software such as Log4J.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
The administration said Gold Eagle has already begun processing or collecting vulnerability reports and intelligence, indicating the clearinghouse is operational before its public announcement.
The White House publicly announced Gold Eagle as a new AI-backed cyberthreat and vulnerability clearinghouse involving Treasury, CISA, the Defense Department, and private-sector and open-source participants.
A June 2 executive order established Gold Eagle, a federal AI-backed clearinghouse intended to consolidate software vulnerability findings from government and industry and coordinate remediation across critical infrastructure.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
securityweek.com
Open sourcemalware.news
Open sourcenextgov.com
Open sourcecyberscoop.com
Open sourcewhitehouse.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
President Trump signed an executive order, **"Promoting Advanced Artificial Intelligence Innovation and Security,"** that directs federal agencies to strengthen cyber defenses across national security, defense, and civilian systems while promoting U.S. AI innovation. The order tasks **CISA, NSA, OMB, Treasury, ONCD**, and other agencies with near-term deadlines to prioritize cyber defense, expand AI-enabled defensive capabilities, and issue operational directives where appropriate. It also creates an **AI cybersecurity clearinghouse** to coordinate voluntary vulnerability scanning, validation, remediation, and patch distribution with AI companies and critical infrastructure operators, alongside a classified benchmarking process to determine when a system qualifies as a **"covered frontier model."** The final order adopts a narrower oversight approach than earlier drafts, preserving a **voluntary** framework for developers to share advanced models with the federal government and selected trusted partners before broader release while explicitly rejecting mandatory licensing, preclearance, or permitting. Reporting indicates the administration scaled back stronger pre-deployment review proposals after internal debate over how aggressively to address frontier-model cyber risks, with concerns centered on threats to critical infrastructure and the financial system and on whether the **Office of the National Cyber Director** has sufficient authority to coordinate the response. The order also directs the attorney general to prioritize criminal enforcement against actors who use AI to illegally access, damage, or exploit computer systems and data.
Jun 29, 2026
The White House issued **National Security Presidential Memorandum 11 (`NSPM-11`)** directing U.S. defense, intelligence, and homeland security agencies to accelerate adoption of advanced artificial intelligence across national security missions while cutting bureaucratic barriers to deployment. The policy applies to agencies including the **FBI, CIA, DHS, and ODNI** and is organized around four pillars: **adoption, adaptation, assurance, and accountability**. It calls for broader use of commercial and open-source AI models, reduced dependence on any single vendor, and expanded collaboration with private-sector and academic experts, while requiring AI use to remain secure, reliable, controllable, and consistent with constitutional command structures and civil liberties protections. The memorandum sets 90- and 120-day deadlines for agencies to update procurement, governance, testing, workforce development, and autonomous weapons policies, and it establishes an **AI National Security Strategic Reserve** of outside experts. It also orders baseline security standards for high-security national security AI systems and joint AI data and model exchanges, while directing agencies and vendors to harden frontier models, supporting infrastructure, and data centers against **cyberespionage, theft, cyberattacks, supply-chain risks, and malicious distillation attacks**. The move follows an earlier executive order that created a voluntary federal review framework for advanced AI systems before public release.
Jun 29, 2026
European and national cyber authorities are warning that AI is rapidly increasing the speed and scale of vulnerability discovery and exploit development, raising the prospect of a sustained remediation crisis. The European Central Bank told about 110 major banks to assess AI-enabled cyber threats and submit action plans by **October 31, 2026**, while the European Systemic Risk Board and European Supervisory Authorities issued parallel warnings on systemic risk from frontier AI models. In France, ANSSI Director General Vincent Strubel told senators that AI-assisted discovery could create a multi-year **"patch wall"**, overwhelming remediation teams even as basic controls such as network segmentation, identity and access management, and timely patching remain the most effective defenses. Industry reporting and vendor disclosures show why regulators are escalating. Mozilla said frontier AI models helped identify **271 vulnerabilities** fixed in Firefox 150 after an earlier run found 22 security-sensitive bugs, while researchers and commentators say LLM-assisted patch diffing can shrink the path from a disclosed `CVE` to a working proof of concept to days or even hours, including for flaws such as `CVE-2025-32433` in Erlang/OTP SSH. At the same time, access controls around advanced cyber-capable models are tightening unevenly: Anthropic expanded its restricted **Project Glasswing** program for Claude Mythos to critical-infrastructure organizations, but open-weight alternatives such as Zhipu AI's **GLM-5.2** are reported to deliver competitive vulnerability-finding performance at lower cost, reinforcing concerns that powerful offensive-relevant capability is spreading faster than most enterprises can patch.
Jul 10, 2026