Cybersecurity

NIST should modernize the NVD by expanding automation, improving coordination with CISA, and adopting more reliable product‑identification and data‑ingestion systems that support machine‑speed defense.

Canada should pursue digital sovereignty through contractual safeguards and resilient systems, rather than Canadian ownership requirements that raise costs and create trade risks.

As AI systems gain greater autonomy, policymakers should prioritize research and safeguards that make dangerous behavior harder to initiate, easier to detect, and faster to contain. Emergency shutdown capabilities can be one useful tool in that effort, but a government‑mandated kill switch is neither universally feasible nor sufficient to address the broader challenges posed by autonomous AI.

Enlisting private companies in offensive cyber operations could strengthen U.S. efforts against transnational cybercrime, but the program needs rigorous guardrails and congressional oversight to limit collateral damage and escalation.

Policymakers are rushing to regulate AI chatbots. But they should carefully weigh the best approaches to enable safe usage while meaningfully protecting children from harm.

Age assurance should not become a default prerequisite for accessing the Internet, but it can still hold a place in a comprehensive approach to children’s online safety.

Daniel Castro speaks about the importance of accelerating AI adoption in the U.S. economy at the Capitol Hill Conference on AI, Cyber, & Tech Policy Priorities hosted by the Lexington Institute.

Daniel Castro presented on the evolving role of frontier AI firms in international security at an international symposium hosted by the University of International Relations in Beijing.

Watch now for an expert panel discussion on the current state of federal privacy negotiations and the path forward for Congress.

Rather than creating a new funding program for the Multi-State Information Sharing and Analysis Center, Congress should incorporate its funding into the reauthorization of the State and Local Cybersecurity Grant Program. This approach would preserve critical cybersecurity services while improving coordination between the Cybersecurity and Infrastructure Security Agency and the Center for Internet Security.