In a significant move to bolster U.S. leadership in artificial intelligence, the U.S. Department of Commerce's National Institute of Standards and Technology (NIST) has announced a $20 million investment to create two new national AI centers. The centers will be operated by the MITRE Corporation and will focus on two key national priorities: enhancing the productivity of U.S. manufacturing and securing critical infrastructure from sophisticated cyberthreats. This partnership aims to develop the evaluations, tools, and guidance necessary to foster secure AI innovation and defend against its malicious use by adversaries.
The initiative, announced in late December 2025, establishes two distinct entities:
This $20 million investment is a component of NIST's broader Strategy for American Technology Leadership and directly supports the White House's America's AI Action Plan. The collaboration builds upon MITRE's role as the operator of the National Cybersecurity Federally Funded Research and Development Center (FFRDC).
The primary organizations involved are NIST, which is providing the funding and strategic direction, and MITRE, which will operate the centers. The work of these centers will directly affect a wide range of public and private sector organizations, including:
While not a direct regulation, the outputs of these centers—such as frameworks, best practices, and technology evaluations—will heavily influence future standards and compliance requirements for organizations using AI or operating in critical sectors. The centers will bring together experts from government, industry, and academia to:
This investment represents a proactive, strategic effort by the U.S. government to get ahead of the dual-use nature of artificial intelligence.

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.
Help others stay informed about cybersecurity threats
Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.
Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.
Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.
Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.
Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.