Become a Member

Regulation TrackerLaws, orders and treaties read for their security duties and clocks Standards & FrameworksAttack taxonomies, control catalogues and frontier frameworks AI Incident DatabaseThe security incident record, with mechanism and lesson Research Paper LibraryThe papers that define the field, summarised OSS DirectoryRed teaming, guardrail, supply chain and evaluation tools Case StudiesProgrammes built, with measured outcomes AI Vulnerability TrackerCVEs and advisories for the components AI systems are built from

Latest in the tracker

New York Stop Addictive Feeds Exploitation (SAFE) for Kids Act and implementing rulesNew York's law restricting algorithmic feeds for minors takes effect on 25 January 2027 under final rules published in July 2026, with certified age assurance and $5,000-per-violation penalties.

Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Become a Member

Home/News/December 2025

NIST releases the preliminary draft Cyber AI Profile mapping CSF 2.0 to AI systems, AI-enabled defence and AI-enabled attacks

IR 8596 gives organisations with mature Cybersecurity Framework programmes a path to cover AI components, the use of AI in security operations and defence against AI-enabled adversaries.

Standards and frameworksUnited States11 Dec 2025

The draft complements the SP 800-53 overlays for securing AI systems announced in August and follows the executive order that folded AI vulnerabilities into federal vulnerability management.

What to do: map your CSF profile to the three focus areas and comment on the draft; the third area, thwarting AI-enabled attacks, is where most programmes have nothing.