Trump signs EO 14306, narrowing EO 14144's AI cybersecurity provisions

On June 6, 2025, President Trump signed Executive Order 14306, which amended Executive Order 14144's Artificial Intelligence provisions along with several other cybersecurity directives from the prior administration.

The order replaced EO 14144's original AI section with a narrower one focused on access to cyber-defense datasets and folding AI vulnerability management into existing agency processes.

What it is

EO 14306 is titled Sustaining Select Efforts to Strengthen the Nation's Cybersecurity and Amending Executive Order 13694 and Executive Order 14144, and it revises the cybersecurity executive order signed at the end of the previous administration.

Rather than issuing a wholly new policy, EO 14306 performs line edits across EO 14144's sections, including the AI section, while leaving most of the surrounding text intact.

What it requires

EO 14306 strikes EO 14144's former AI section and inserts a new Section 5, Promoting Security with and in Artificial Intelligence, built around two concrete deadlines.

First, by November 1, 2025, the Secretary of Commerce, acting through the Director of NIST; the Secretary of Energy; the Secretary of Homeland Security, acting through the Under Secretary for Science and Technology; and the Director of the National Science Foundation shall ensure that existing datasets for cyber-defense research are made available to academic researchers.

Second, by the same date, defense, homeland security and intelligence officials shall incorporate management of AI software vulnerabilities and compromises into their respective agencies' existing processes and interagency coordination mechanisms for vulnerability management, including through incident tracking, response, and reporting, and by sharing indicators of compromise for AI systems.

The Congressional Research Service describes the net effect as limiting agency AI work to improvements of cybersecurity automation.

A law firm alert on the order separately described the change as the discontinuation of certain government-led AI cybersecurity research initiatives, in order to refocus such efforts.

What security leaders should do

Security teams tracking federal AI cyber-defense research should watch whether the November 1, 2025 dataset-access deadline produces usable academic datasets, since EO 14306 ties that work to the broader federal cyber-defense research agenda described above. Teams that build or consume federal AI security indicators should expect those indicators to be folded into existing incident-tracking and vulnerability-management workflows rather than handled through a standalone AI program, consistent with the order's text on interagency coordination mechanisms. Because the order narrows government-led AI cybersecurity research rather than expanding it, organizations relying on federal AI threat-research outputs should confirm current scope with their agency counterparts and not assume continuity with EO 14144's original, broader AI research mandate.