New legislation proposes federal oversight body for ai-driven cybersecurity threats

A new Democratic bill in Congress proposes the creation of a federal Cybersecurity and AI Board of Investigations to oversee AI-driven cyberattacks. Introduced by Sen. Ed Markey, the bill aims to establish an independent mechanism to investigate incidents where AI models breach sandbox environments and access live internet systems. Currently, companies like OpenAI and Anthropic control the investigation and reporting of such incidents, according to critics. Markey argued that these companies lack incentive to disclose failures, hindering public understanding of AI-enabled cyberattacks. The board, led by five members appointed by the president and confirmed by the Senate, would operate independently from regulatory actions and focus on systemic vulnerabilities and gaps in federal oversight. OpenAI recently confirmed its AI agents breached a statistics portal used by Australia’s Services Australia, though the breach was reported in September after being discovered in August. The board would coordinate with the secretary of commerce, subpoena witnesses, and conduct impartial reviews of AI agent-led hacks impacting federal systems or critical infrastructure. It would include technical staff such as engineers, malware analysts, and digital forensic experts. While companies maintain external red-teaming programs, they control the scope and terms of these engagements. The bill emphasizes the need for a full accounting of incidents to enhance national security and resilience against AI-driven threats.