Chronicle/Policy & standards

NIST second draft of AI 800-1 on dual-use foundation model misuse adds cybersecurity appendix

Jan 15, 2025PolicyGuidanceSignificance assistant-drafted

NIST's AI Safety Institute released a second public draft of NIST AI 800-1, voluntary guidelines for managing misuse risk from dual-use foundation models across the lifecycle. NIST says the draft adds detailed evaluation approaches, a marginal-risk framework, and an extensive appendix on cybersecurity misuse risk, and covers both closed and open model developers.

Why it matters

It was the main US government draft practice for measuring and mitigating cyber misuse of frontier models before the 2025 policy shift.

Key facts

As stated in the sources, with where to find them.

Second draft adds an extensive appendix on cybersecurity misuse risk alongside chemical and biological guidance; comments were due March 15, 2025.NIST news release

Findings that cite this record

No tracked finding cites this record yet.

Sources

Updated Guidelines for Managing Misuse Risk for Dual-Use Foundation ModelsNISTJan 15, 2025Primary sourceAccessed Sep 25, 2026

Related records

Jul 2, 2026

Anthropic proposes Cyber Jailbreak Severity scale with Glasswing partners

PolicyFrameworkAnthropic

May 1, 2026

CAISI evaluation finds DeepSeek V4 Pro trails US frontier models by about eight months

CapabilityEvaluation reportUS Center for AI Standards and Innovation, DeepSeek, NIST

Sep 30, 2025

CAISI evaluation finds DeepSeek models lag US models on cyber tasks and are far easier to hijack

CapabilityEvaluation reportUS Center for AI Standards and Innovation, NIST, DeepSeek

Jun 30, 2026

US lifts export controls on Fable 5 and Mythos 5; Anthropic redeploys with new cyber classifier

PolicyRegulationAnthropic, US Department of Commerce, US Center for AI Standards and Innovation

June 2025

US AI Safety Institute becomes Center for AI Standards and Innovation with cyber-focused evaluations

PolicyProgramUS Department of Commerce, NIST, US Center for AI Standards and Innovation

Mar 24, 2025

NIST AI 100-2 E2025 taxonomy adds a dedicated section on security of AI agents

PolicyStandardNIST, UK AI Security Institute, US Center for AI Standards and Innovation

Organizations: NIST, US Center for AI Standards and Innovation
Topics: Standards & guidance Capability evaluation Jailbreaks & safeguards
Attack surface: Agent model Access gate
Record: nist-ai-800-1-second-draft-cyber-misuse-2025 · added 2026-09-25

Cite this record

Fide AI. "NIST second draft of AI 800-1 on dual-use foundation model misuse adds cybersecurity appendix." Agentic Cyber Explorer, record nist-ai-800-1-second-draft-cyber-misuse-2025. https://agentic-cyber-explorer.pages.dev/events/nist-ai-800-1-second-draft-cyber-misuse-2025/ (corpus as of 2026-09-26).

BibTeX

@misc{fide-ace-nist-ai-800-1-second-draft-cyber-misuse-2025,
  author = {{Fide AI}},
  title = {NIST second draft of AI 800-1 on dual-use foundation model misuse adds cybersecurity appendix},
  howpublished = {Agentic Cyber Explorer},
  year = {2026},
  url = {https://agentic-cyber-explorer.pages.dev/events/nist-ai-800-1-second-draft-cyber-misuse-2025/},
  note = {Record nist-ai-800-1-second-draft-cyber-misuse-2025; corpus as of 2026-09-26}
}

Data: JSON · CC BY 4.0

Spotted an error? Suggest a correction.