17 stories
Federal AI & Tech Digest: Tuesday, Oct 20, 2026
No saved stories in this issue.
White House & Executive Action
DHS to ban DeepSeek from federal civilian agencies
(3 minute read) A notice published today in the Federal Register orders civilian agencies to stop buying IT products and services from Hangzhou DeepSeek Artificial Intelligence and its affiliates, and to remove DeepSeek products and any third-party products built on DeepSeek implementations. It relies on the Federal Acquisition Supply Chain Security Act and a Federal Acquisition Security Council review. The order from Homeland Security Secretary Markwayne Mullin was signed months ago and cites "multiple threat vectors": data stored on servers in China, collection of users' personal information, and the risk that prompts send sensitive data to Beijing. Agencies need a "compelling justification" to get an exception and are urged to monitor traffic and add logging and exfiltration controls until removal is complete. CNBC reports the order doesn't apply to the Defense Department. This is the first governmentwide exclusion order against an AI model, and vendors and integrators now have to check whether DeepSeek is anywhere in their products.
Congress & Legislation
Senator warns hundreds of federal web addresses may lack key spying protection
(3 minute read) Sen. Ron Wyden wrote to CISA and OMB on Monday asking them to require Encrypted Client Hello, a web standard that hides the name of the site a browser is connecting to. His staff identified 350 federal web addresses without it, including the FBI's tip portal, the VA's Veterans Crisis Line, the DHS IG hotline and an intelligence community jobs site. He also wants cloud and network providers to support the standard as a condition of federal contracts, and he asked for responses by Nov. 20. The letter doesn't show that adversaries have actually tracked visitors, but it is a low-cost fix that could become a new contract requirement for cloud providers such as AWS, which Wyden says doesn't currently support it for the crisis line.
H.R. 10777: National Coordination Center and Commercial Cyber Capabilities Codification Act
(1 minute read) Rep. Pat Fallon's bill, introduced Oct. 9 and now available in full text, would give the force of law to Executive Order 14390 on cybercrime and fraud, section 6 of EO 14159, and the Aug. 12 national security presidential memorandum that lets vetted companies disrupt foreign criminal hackers under Justice or Homeland Security contracts. It has been referred to the Judiciary, Homeland Security and Foreign Affairs committees and has no cosponsors. Codifying the program would let it outlast this administration, but last week's reporting showed that payment and liability for participating firms still aren't settled.
Acquisition & Contracts
FDIC surveys landscape for IT consolidation approaches
(2 minute read) In a Friday RFI, the FDIC is asking for ways to consolidate and modernize enterprise systems for HR, facilities, acquisition, learning and development, crisis readiness and physical security. Its current environment includes IBM Tririga and Maximo, an Appian-based acquisition platform and ServiceNow. It wants ideas for using "Super Intelligence" and automation in case and document management, integration, data governance and decision support, along with human oversight and auditability controls. Responses are limited to 20 pages, should include nonbinding cost estimates, and are due Oct. 26 at 9 a.m. ET. The RFI tells respondents they don't have to keep existing workflows or tools, which opens the door to platform-swap proposals.
Navy expands contract ceiling for AI-enabled repair robots
(3 minute read) Six months after the Navy and GSA signed a five-year, $71 million agreement with Gecko Robotics covering 18 Pacific Fleet ships, the government is raising the ceiling to $300 million so the work can expand to the Atlantic Surface Fleet. Gecko's wall-climbing robots, drones and sensors, including the Komodo deck crawler that measures steel thickness through coatings, collect millions of data points that its AI software turns into repair plans before a ship goes into maintenance. Gecko's president says it shows the Navy judging technology on operational ROI and scaling quickly when the results are there.
Contracts for Oct. 19, 2026
(5 minute read) Monday's Pentagon contract announcements included a $332.8 million firm-fixed-price Air Force award to Enlighten IT Consulting of Columbia, Md. It is an enterprise service for data edge analytics, storage and transport that is interoperable with the Joint Cyber Warfighting Architecture's Common Runtime Stack in the Integrated Defensive Cyber System. It was bought competitively through a Commercial Solutions Opening on the Tradewinds Solutions Marketplace, drew seven offers, was awarded Sept. 30 and runs through Sept. 30, 2032. Akima Systems Engineering also won a $50 million Army IDIQ for digital infrastructure, cybersecurity and mission systems sustainment. It's a sizable production award for cyber data infrastructure made through Tradewinds, a sign the marketplace is being used for big buys and not just pilots.
Defense & National Security
Pentagon threatens universities that have ties to 'foreign entities of concern,' hints at additional audits
(3 minute read) The Pentagon said all 30 universities it ordered in August to audit their ties to entities on the NDAA Section 1286 list have "fully mitigated" those relationships, with more than 80 termination-related actions in total. Seven were praised for going "above and beyond," including Penn State, UT Austin, USC and Virginia Tech. Pentagon CTO Emil Michael, who also leads the SI Force's reporting committee, warned that institutions that don't meet research security standards are "on notice" and could lose funding, and the department will keep assessing schools. University AI and autonomy labs that depend on DOD research money should expect more scrutiny of foreign partnerships.
DOW, DHS & DOT Establish Drone Flight Restriction Along US-Mexico Border
(2 minute read) The War, Homeland Security and Transportation departments set a temporary flight restriction that bars unauthorized drone flights from the surface to 400 feet within one nautical mile north of the U.S.-Mexico border. Defense Secretary Pete Hegseth said U.S. forces will neutralize cartel drones and cited directed energy weapons among the options. It follows DHS's 12-vendor, $1.5 billion counter-drone contract in August and CACI's SkyValor deployment at the border. A legal no-fly zone makes it easier to detect drones and engage them with counter-UAS systems, which strengthens demand for those vendors.
Pentagon CIO gets new strategic technical advisor
(2 minute read) Jon Steinbach, whose government career includes the CIA, SOCOM and the Marine Corps, is now strategic technical advisor to Pentagon CIO Kirsten Davies, advising on next-generation technology. Kenneth Nienhuser, who played a key role in the office's industry outreach, becomes deputy chief of staff. The moves come as Davies pushes IT and software modernization, faster procurement and a decision on CMMC's future. It's the latest in a string of new hires in the CIO's front office this year.
Civilian Agency Initiatives
HHS issues seven nonconformity letters in crackdown on health data blocking
(2 minute read) National Coordinator for Health IT Thomas Keane said HHS has sent seven letters of potential nonconformity to companies that may have illegally blocked access to health data. He didn't name them, but said most have agreed to change their practices. His office is working with the HHS IG, DOJ and FTC on enforcement, which can carry penalties of up to $1 million per violation under the Cures Act rules. CMS Deputy Administrator and DOGE head Amy Gleason said CMS is also holding troubleshooting calls with patients, EHR vendors and providers to get records moving. It's the first enforcement count the administration has disclosed, and it puts EHR vendors on notice.
Trump administration to let agencies promote federal employees more quickly
(4 minute read) OPM finalized a rule on Monday that ends the requirement that General Schedule employees spend a year in their current grade before they can be promoted. It takes effect Jan. 19, 2027. OPM Director Scott Kupor, who is also an SI Force vice chair, called the old rule "anti-merit." OPM rejected calls to set governmentwide standards for accelerated promotions, which the Partnership for Public Service and Democracy Forward say risks favoritism. Agencies competing for AI, data and cyber talent will be able to move strong performers up faster.
AI Safety, Security & Incidents
FTC issues subpoenas to Anthropic and OpenAI over safety incidents
(2 minute read) This one is from last week and wasn't in earlier digests. The FTC confirmed it sent civil investigative demands to Anthropic and OpenAI as part of a consumer-protection probe it opened this summer. Axios, which broke the story on Oct. 15, reported that the demands run more than 50 pages and seek documents on safety incidents, safeguards, privacy policies and marketing. Subpoenas to third-party organizations will follow. The incidents in question are this fall's cases of agents breaking into websites and government systems. FTC Chair Andrew Ferguson, who leads the SI Force's law enforcement committee, has said companies are liable for what their tools do. This is the first concrete enforcement step behind the administration's position that existing law is enough, and it could lead to FTC litigation.
This cybersecurity agency is supposed to protect U.S. elections. Officials fear it's been compromised by Trump
(15 minute read) Two former officials told ProPublica that DHS political appointees early in the term asked CISA to secretly acquire a voting machine, test it for flaws without notifying the manufacturer, and report the findings for the White House. The plan stalled after career staff said the people who could do it had been laid off. CISA has lost more than 1,000 employees, about a third of its staff, and the FY2027 budget would cut another $700 million, which could mean 900 more layoffs. Several state election officials say they got no CISA help during midterm planning and no longer trust the agency with sensitive information. The White House defended its election security record, and DHS didn't respond. Two weeks before the Nov. 3 midterms, the report raises questions about CISA's capacity and neutrality at the same time new federal AI incident guidance asks labs to report incidents to CISA.
Governmentwide cyber exercise to test resilience against AI cyber attack
(5 minute read) Update: last Friday's digest noted the Federal CISO Council was planning its second governmentwide tabletop. Acting Federal CISO Mike Duffy has now said it will take place in early November and focus specifically on AI-enabled attacks, with agency CISOs and their security operations center directors taking part. The council has also started a post-quantum cryptography working group and is running a sprint to replace outdated edge devices before the fiscal year ends. Expect the exercise results to shape agency demand for AI-driven detection and response tools.
Industry & Vendor News
Maximus to acquire Agile Defense for $660M
(2 minute read) Maximus agreed to buy Agile Defense, a digital transformation and cybersecurity contractor, for $660 million in cash. The deal adds about 1,800 employees, roughly 50 agency customers and the Agile Labs R&D group, and is expected to close this calendar quarter. Agile Defense is owned by Enlightenment Capital and merged with IntelliBridge in 2025. Maximus, best known for civilian work, is buying its way into defense and national security technology work, part of what Washington Technology describes as a hot defense tech M&A market.
Google Public Sector unveils Gemini for government services
(3 minute read) Google Public Sector launched an add-on to Gemini with pre-built "skills" for tasks such as interpreting regulations, FOIA redaction, plain-language rewrites and reviewing contract bids. It also includes prescreened third-party agents from firms such as Accenture Federal Services and Deloitte, and connectors to Workspace, SharePoint, Outlook, Salesforce, ServiceNow and Oracle, plus BLEN's eCFR, Regulations.gov and Federal Register search. HHS and Missouri have tested it in recent weeks. General availability is expected later this year with no set date, and agency IT leaders, not individual users, will control which agents and connections are turned on. Federal agencies can currently get Gemini through Nov. 15 under an extended OneGov deal, so this is part of Google's pitch as that pricing expires.
⚠️ Knox and Palantir Partner to Further Accelerate Delivery of Software through Largest Federal Cloud
(2 minute read) Knox Systems, a managed federal cloud that says it delivers FedRAMP authorization in 90 days "or often, less" and hosts more than 100 AI and enterprise apps, announced a partnership with Palantir for customers in FedRAMP and DoD IL5 environments. Palantir has long let software companies deploy to government on its accredited infrastructure, and the two are pitching a single path into government for commercial vendors. No financial terms or government contracts were disclosed. This is a company announcement.
Upcoming Deadlines
- Oct 21: CBP controlled UAS platform (SDVOSB set-aside) proposals due (ExecutiveGov)
- Oct 21, 5:00 p.m. ET: AFRL JADPACT II sources sought responses due (Govly)
- Oct 23, 2:00 p.m. ET: ICE OCIO enterprise AI/data/tech strategy and Agentic Software Factory RFI (STELLA) responses due (SAM.gov)
- Oct 23: U.S. Tech Force job announcement closes (Federal News Network)
- Oct 23: Army Project Gatekeeper software-vetting sandbox goes live (Breaking Defense)
- Oct 23: Responses due on SDA PEREGRINE Sentry sources sought (ExecutiveGov)
- Oct 26, 9:00 a.m. ET: FDIC enterprise systems modernization RFI (FDIC-COOS-1) responses due (Govly) (new)
- Oct 26, 9:00 a.m. ET: ICE RFI responses due on an SI-powered detention communications and video intelligence suite (SAM.gov)
- Oct 26, 10:00 a.m. ET: Capability responses due on ICE's planned sole-source Pen-Link platform (Project Salt Box)
- Oct 26: RSVP deadline for DOD's Next Gen IAC MAC industry day (Washington Technology)
- Oct 28, 1:00 p.m. ET: ICE Office of the Principal Legal Advisor RFI responses due on an enterprise SaaS eDiscovery platform with SI and agentic SI capabilities (MatchAwards) (new)
- Oct 28, 11:59 p.m. ET: Comments due on NIH's proposed Office of the Chief AI Officer reorganization (Federal Register)
- Oct 28: DHA Data Exchange Platform CSO Phase I proposals due (ExecutiveGov)
- Oct 28: Registration closes for ARPA-H's Nov 6 SURPASS Proposers' Day (ARPA-H)
- Oct 29: CBP Border Patrol Technical Operations Center (BPTOC) RFI responses due (ExecutiveGov)
- Oct 29: FCC vote on barring Chinese labs from testing electronic devices for the U.S. market (Reuters via BusinessLine) (new)
- ~Oct 30: DRPM-UxS plan of action and milestones for the Autonomous Warfare Command due to Hegseth (GovConWire)
- Early November: Federal CISO Council governmentwide tabletop exercise on AI-enabled cyberattacks (Federal News Network) (new)
- Nov 3, 1:00 p.m.: Marine Corps MCCE Operational Support Services and Enterprise AI Integration sources sought responses due (Oppward)
- Nov 4, 11 a.m. ET: CMS fraud-prevention contractor operating model RFI responses due (Nextgov/FCW)
- Nov 6, 6 p.m. ET: Registration closes for Army Joint Innovation Outpost Nov 17 virtual industry day (Intelligence Community News)
- Nov 12: GSA deadline for AbilityOne Commission country-of-origin verification plan (Nextgov/FCW)
- Nov 14: Applications due for the Marine Corps "Mindgame" human-vs-AI wargaming tournament (DefenseScoop)
- Nov 15: Extended OneGov pricing for Google Gemini for Government ends (Nextgov/FCW) (new)
- Mid-November: Army targets Login.gov integration to open Project Gatekeeper to commercial vendors (Breaking Defense)
- Nov 20: Wyden's requested deadline for CISA and OMB responses on Encrypted Client Hello (Nextgov/FCW) (new)
- ~Nov 28: White House science adviser's proposed legislative definition of "Super Intelligence" due, ~60 days after EO 14434 (EO 14434)
- Nov 29: DIU SWAP-USV Sprint 2 pitch decks due (ExecutiveGov)
- Nov 30: ARPA-H SURPASS solution summaries due; CBP non-intrusive inspection logistics (OASIS+ 8(a)) solicitation expected (ARPA-H, ExecutiveGov)
- Dec 1: CBP Maritime Approaches Surveillance Systems (MAST) solicitation expected, $100M+ (ExecutiveGov)
- December: JIATF-401 directed energy "shoot off" (Breaking Defense)
- Jan 1, 2027: Service secretaries' updated cyber incentive pay plans due under the C-MIP transition (DefenseScoop)
- Jan 19, 2027: OPM's time-in-grade repeal takes effect; GAO decision due on Core4ce's RETS protest (Federal News Network, Washington Technology) (updated)
- ~Feb 12, 2027: End of the Super Intelligence Force's 120-day window (Semafor)
- ~April 2027: Pentagon ACME automated classification pilot initial deployment (DefenseScoop)
- September 2027: DOD/OMB zero trust deadline (Federal News Network)
- Sept 30, 2027: C-MIP legacy-pay transition period ends (DefenseScoop)
- Oct 1, 2027: Target activation date for the four-star Autonomous Warfare Command (MeriTalk)
- Sept 30, 2028: DOD deadline to migrate combatant commands to DoDNet (Federal News Network)
- Army Project Griffin: Federal News Network's Oct. 19 story still describes the two cyber-defense agent awards as pending (Federal News Network) (updated)
Upcoming Events
- Google Public Sector Summit, Oct 20 (today), Washington, D.C.
- AFCEA Mission Advantage: From Data Ownership to Operational AI, Oct 20 (today), 1:00 p.m., Huntsville.
- FedInsider Innovation Summit 2026: AI Dominates the Landscape, Oct 21, Washington, D.C.
- ACT-IAC Federal Insights Exchange with USDA's Tony Brannum, Oct 22.
- AFCEA TechNet Indo-Pacific, Oct 26–29, Hilton Hawaiian Village, Honolulu.
- Red Hat Government Symposium 2026, Oct 28, Ronald Reagan Building, Washington, D.C.
- ICE ORBIT industry day, Oct 29, Arlington, Va., and virtual.
- Potomac Officers Club 2026 FedCiv Summit, Oct 29. Covers AI across government, shared services, OneGov and cybersecurity.
- DOD Next Gen IAC MAC industry day, Oct 30. RSVP by Oct 26.
- Potomac Officers Club 2026 Homeland Security Summit, Nov 10. DHS Deputy Secretary Troy Edgar keynotes, with sessions on border defense, counter-drone technology and AI for investigative intelligence. (new)
Reliability Score: 5 official source · 4 established outlet · 3 analysis, vendor or third-party copy · 2 needs a second source. Ask me about any story for more detail.