US Lawmakers Introduce 'AI Cyber Defense Act' to Define and Counter AI Distillation Attacks

US Republican Representative Pat Harrigan and Democratic Representative George Whitesides jointly introduced the "AI Cyber Defense Act" on October 26, 2026. The bill has been referred to the House Committee on Science, Space, and Technology and aims to strengthen US defenses against artificial intelligence-related cyberattacks.

The core provision requires the National Institute of Standards and Technology (NIST) to formally define "AI distillation attacks" within 180 days of the act's enactment, in collaboration with private AI companies. It also mandates the development of voluntary standards and best practices for detecting and preventing such attacks. AI distillation refers to the process of transferring knowledge or capabilities from one large AI model to another, often used to replicate high-performance models at lower cost.

Additionally, the bill requires NIST to establish an AI cybersecurity roundtable within the same timeframe to develop voluntary standards for using AI itself for security protection. Geographically, the bill explicitly lists North Korea, China, Russia, Iran, and Cuba as "countries of concern," indicating Washington's intent to link AI technology competition directly with national security threats through legislation.

This move is not isolated. Just a week prior to the bill's introduction, the US Treasury Department proposed expanding investment restrictions on sensitive technologies, similarly including North Korea and other listed nations in its review scope. These actions suggest the US government is accelerating the construction of a comprehensive defense framework covering both capital flows and technical standards to counter adversaries leveraging US technology for advanced military or AI capabilities.