Back to News
PolicyAI Understanding briefing

Washington’s AI biosecurity gap: capabilities advance as safeguards lag

The Washington Post reports that AI is making biological research more capable while federal biosecurity oversight has been reduced and a replacement policy for screening risky genetic orders remains delayed. Experts say significant technical barriers remain, but warn that safeguards may not be keeping pace.

By 5 min read
AI-generated editorial illustration accompanying Washington’s AI biosecurity gap: capabilities advance as safeguards lag
The short version

The Washington Post reports that AI is making biological research more capable while federal biosecurity oversight has been reduced and a replacement policy for screening risky genetic orders remains delayed. Experts say significant technical barriers remain, but warn that safeguards may not be keeping pace.

What happened

The Washington Post reports that AI systems are advancing biological research while U.S. safeguards and federal biosecurity capacity remain unsettled. The Post describes experiments involving AI-generated biological designs and reports that the White House has reduced its dedicated biosecurity staffing while delaying a replacement policy for screening potentially dangerous genetic orders.

In its Aug. 25 Health Brief, The Washington Post reports that researchers and policy experts are increasingly concerned about AI’s role in biological research. The Post says the central concern is not only whether a person could ask an AI system for instructions about a biological weapon, but whether increasingly capable systems might independently perform more of the scientific reasoning needed to identify dangerous possibilities. The report also emphasizes that experts do not believe the technology has reached the point where creating a dangerous pathogen is straightforward; significant barriers remain between an AI model and a successful biological attack.

The Washington Post reports that an MIT scientist testing an unidentified company’s AI model found that it combined information from different areas of biology into what appeared to be a roadmap for a new type of bioweapon. The company was not named in the source, so its safeguards and the exact test conditions cannot be independently assessed here.

The Post also reports on a separate experiment in which researchers used AI to design 16 viruses capable of attacking bacteria. Only a small share of the generated sequences worked in laboratory testing, and the viruses could not infect humans, according to the report. The source does not provide enough detail to independently evaluate either experiment’s methods or reproducibility.

The Post reports that AI companies have introduced filters intended to reduce the chance that users can obtain dangerous biological information, while warning that some leading Chinese models do not have equivalent safeguards. The source provides no independent testing data for that comparison. The Washington Post also reports that the White House has held briefings with OpenAI and other agencies about biological risks, and that a new initiative involving the White House, the Department of Health and Human Services and other parties is reportedly taking shape. The initiative’s structure, authority, timeline and concrete safeguards remain unknown.

Read the primary source: washingtonpost.com

Why it matters

AI could support vaccines, treatments and pandemic defenses, but the same capabilities may lower barriers to biological threat development. The reporting does not establish that current AI systems can create a human-infecting pathogen, and experts cited by The Washington Post say substantial barriers remain. It does show a policy gap between rapidly changing capabilities and incomplete government oversight.

The public-interest significance is the combination of capability growth and institutional uncertainty. AI-assisted biological research could help scientists identify treatments, develop vaccines or prepare for pandemics. But if models can connect specialized biological information in ways users did not anticipate, safety systems must address more than obvious requests for harmful instructions. They may also need to manage indirect assistance, model autonomy and access to scientific tools or data. The Washington Post’s reporting raises that issue without claiming that a catastrophic biological threat is imminent.

The policy concern is amplified by reported reductions in federal biosecurity capacity. The Washington Post says that, near the end of the Biden administration, as many as 30 people worked on biological security in the White House. After President Donald Trump returned to office, the team rapidly dwindled amid staffing cuts and reorganizations; at times, former officials told The Post, no one at the White House worked solely on biosecurity. The Post reports that a smaller and more changeable group has since handled the work, with some personnel working part-time or having limited experience. These claims rely partly on anonymous former officials and are not independently confirmed by the source material.

The Washington Post reports that Trump revoked a 2023 executive order concerning biological safeguards and directed officials to replace a separate policy requiring companies to screen buyers seeking genetic components that could be used to create biological agents. That replacement was expected by August of the previous year but had not arrived when the newsletter was published. A delay matters because screening of genetic orders is one of the concrete controls described in the report.

The source also notes that provisions in a defense authorization bill may strengthen AI-related biosecurity but that experts believe users could circumvent them. The practical effectiveness of those provisions is not established here.

What to watch next

The key test is whether the Trump administration publishes enforceable safeguards for AI and biological-risk management, including the delayed genetic-order screening policy. Watch for details about the reported White House and Health and Human Services initiative, evidence that federal biosecurity expertise is being rebuilt, and independent evaluations of safeguards across U.S. and Chinese AI models.

First, watch for the replacement policy governing genetic-component screening. The Washington Post reports that the administration directed officials to produce it, but the policy had still not appeared after more than a year. Important unanswered questions include which sequences or buyers would be covered, who would enforce the rules, how international suppliers would participate, and whether the system would address AI-assisted design rather than only the purchase of known risky genetic material. None of those details is provided in the source.

Second, watch for evidence that the reported White House initiative becomes an operational program rather than a planning effort. The Post reports briefings with OpenAI and other agencies and says an initiative involving the White House and HHS is reportedly taking shape. The White House told Ian Duncan that its commitment to AI and biological safety risks was ongoing and that officials had been developing policy for more than a year. The source does not independently confirm the initiative, its budget, staffing, legal authority or implementation schedule.

The Washington Post also discloses a content partnership with OpenAI, which readers should consider when assessing reporting about that company. Finally, watch for independent technical evaluations of AI safeguards and biological experiments. The reporting leaves several meaningful unknowns: the identity and capabilities of the unnamed model, the precise methods used in the virus-design experiment, the rate at which generated designs can be reproduced, and whether any system can reliably block dangerous assistance without also obstructing legitimate research.

Watch also for whether federal agencies restore durable expertise across public health, defense and science offices. The central question is not whether AI will produce a bioweapon on its own, which the source does not establish, but whether institutions can identify and manage new failure modes as models become more capable.

Related guides & quizzes

AI EthicsAI Models ExplainedAI TrainingFuture of AITest what you know — try a free AI quizLook up an AI term in our glossary
Found this useful?