What happened
Report from the Bipartisan Commission on Biodefense at the Atlantic Council examines whether the United States can determine the origin of a biological attack in the age of AI. Its headline finding: "Artificial intelligence (AI) can already design novel biological threats, and could potentially design agents that escape existing attribution methods." It assesses US attribution capabilities since the 2001 anthrax attacks, finds responsibility is dispersed across the FBI, DHS, HHS and the intelligence community and "has not comprehensively unified all these elements to ensure information reaches decision-makers in a timely manner," and warns "we are still not fully ready to determine responsibility for the next biological attack." It argues the US must possess the capability to establish where a biological threat came from and hold attackers accountable, and that readiness requires procedures, protocols and information-sharing mechanisms to be in place before a biological event occurs.
Why it matters
For boards and policy leads tracking AI-enabled biosecurity risk, this frames the attribution gap — the US cannot yet reliably establish responsibility for an AI-designed or AI-augmented biological attack, which directly changes deterrence, response and liability calculus.
Action needed
Brief the risk/security committee on the AI-bio attribution gap and stress-test whether current incident-response procedures and interagency information-sharing would function for an AI-designed biological threat.