NIST’s December Cyber AI draft separated three security questions
The preliminary profile connected protection of AI, AI-assisted defense and defenses against AI-enabled attacks.
- Event / announcement date
- 2025-12-16
- Earliest linked source date
- 2025-12-16
- NewsTumble first published
- 2026-10-25T22:14:43Z
- NewsTumble updated
- 2026-10-25T22:14:43Z
NIST released a preliminary Cyber AI Profile on December 16, 2025, applying its Cybersecurity Framework 2.0 to questions raised by artificial intelligence. The announcement described an organizational planning tool, rather than a certification of AI products. [1]
The draft organized the subject into three areas: protecting AI systems, using AI to support cyber defense and resisting attacks enabled by AI. Separating those questions helps explain why an organization’s use of AI and its exposure to AI-related threats are not the same problem. [1]
NIST opened a 45-day public-comment period, with a January 30, 2026 deadline, and described plans for a further public draft. Those dates belong to the December announcement. This archive does not treat that consultation as still open or establish the document’s latest status. [1]
The release said a finalized profile would help organizations prioritize actions and connect cybersecurity considerations with other NIST resources. Its value at this stage was a proposed structure for discussion and refinement, not evidence that adopting a document by itself eliminates risk. [1]
The source
- NIST: Draft NIST Guidelines Rethink Cybersecurity for the AI Era ↗
Source published 2025-12-16 · reviewed 2026-10-25
About this item: Retrospective source brief. No first-hand reporting or independent testing is claimed. Corrections policy.
