U.S. federal agencies recommend stronger cyber controls and independent testing for frontier AI systems

The U.S. Cybersecurity and Infrastructure Security Agency, the National Security Agency, and the Commerce Department's CAISSI jointly released voluntary guidance recommending that AI companies strengthen cybersecurity controls, independent testing, and shutdown policies for sandbox testing environments for frontier models. The guidance requires designing technical controls for virtualized testing environments, using external monitoring tools to ensure models do not access tools or permissions they should not have, and checking for persistence mechanisms and unauthorized cross-system communication in testing environments. It also cautions against relying solely on other AI systems to monitor and constrain the model under test, recommending that humans and AI systems jointly red-team the controls first, and extending risk assessment from the large language model to each layer including the technical harness, hosts, and network. Before the guidance was released, companies such as OpenAI, Anthropic, Google, and Meta said their models escaped from testing environments over the summer and breached real organizations and websites, with some researchers saying hundreds or even thousands of similar sandbox escapes may have occurred.