{"id":10098,"date":"2026-10-21T01:55:45","date_gmt":"2026-10-21T01:55:45","guid":{"rendered":"https:\/\/cybersecurityinfocus.com\/?p=10098"},"modified":"2026-10-21T01:55:45","modified_gmt":"2026-10-21T01:55:45","slug":"us-bans-deepseek-across-federal-agencies-putting-ai-supply-chains-under-scrutiny","status":"publish","type":"post","link":"https:\/\/cybersecurityinfocus.com\/?p=10098","title":{"rendered":"US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny"},"content":{"rendered":"
\n
\n
\n
\n
<\/div>\n

DeepSeek has been dealt a huge blow in the US, even as it continues to innovate and keep pace with, or in some cases outperform, rival models from American labs.<\/p>\n

The US Secretary of Homeland Security has issued an order banning all DeepSeek products and services from federal agencies. Government organizations must purge their IT systems of it within 60 days; those with \u201ccompelling justification\u201d can make a case for exemption by written request to the Cybersecurity and Infrastructure Security Agency (CISA).<\/p>\n

The Department of Homeland Security (DHS) cited multiple concerns about the Chinese-hosted model, including data sovereignty<\/a>, lax Chinese laws, and security vulnerabilities.<\/p>\n

Analyst Erik Avakian<\/a>, technical counselor at Infotech, understands the concern. \u201cWhen organizations use any type of hosted AI service, they\u2019re potentially sending intellectual property, confidential business information, or other sensitive data into an environment where they may have very little visibility or control over what happens to it,\u201d he said.<\/p>\n

Government concerns<\/h2>\n

According to a document published in the US Federal Register<\/a>, all technology developed by China-based Hangzhou DeepSeek Artificial Intelligence Co. will be banned from procurement by federal civilian agencies. This includes affiliated products and any third-party tools or software built using DeepSeek implementations.<\/p>\n

Affected civilian executive branch agencies include the Departments of Treasury, State, and Justice; it does not apply, however, to private consumers, the general public, state\/local governments, or Department of Defense (DoD) national security systems.<\/p>\n

\u201cDeepSeek\u2019s models present multiple threat vectors,\u201d the Order stated. To begin with, the company\u2019s servers are located in the People\u2019 s Republic of China (PRC), whose legal system grants \u201cextensive authority\u201d to government cyber and intelligence functions to access private infrastructure.<\/p>\n

DeepSeek\u2019s account generation process collects personally identifiable information (PII) and may also track and digitally fingerprint users, the Order asserted. Its prompt response process may result in the transfer of sensitive data to the PRC. This could give it \u201cactionable intelligence\u201d on US programs or individual users.<\/p>\n

Further, the Order stated, DeepSeek models themselves may contain malware or other security vulnerabilities. DHS pointed to open-source security research<\/a> published in February 2025 that uncovered many iOS mobile apps with multiple critical vulnerabilities.<\/p>\n

Until the ban takes full effect, DHS advised agencies to mitigate risk by monitoring inbound and outbound data traffic, implementing enhanced logging and controls on data exfiltration, and detecting and flagging anomalous activity.<\/p>\n

Agencies can submit requests for exceptions to the ban in writing, and must provide a \u201ccompelling justification,\u201d such as its impact on mission-critical functions, or other considerations related to national interest such as national security reviews, investigations, or security agreements, as reasons why such exemption should be granted,.<\/p>\n

Security issues are rampant<\/h2>\n

The ban comes just as DeepSeek is open-sourcing DeepInfer, its in-house interference framework. DeepInfer powers DeepSeek-V4.1-Flash with what the company said is high throughput and low latency. It features high-performance kernels, an optimized inference engine, structured outputs, and speculative decoding.<\/p>\n

DeepSeek said its production token encoding and decoding components, which are aligned with processing logic behind the DeepSeek API, will bring the \u201csame API behavior to community deployments.\u201d<\/p>\n

\u201cOpen models. Open kernels. Open inference,\u201d DeepSeek posted to social media site X<\/a>. \u201cFrom private deployments to public clouds, we\u2019ll keep working with the community to make large-scale inference more efficient.\u201d<\/p>\n

This isn\u2019t its first roadblock from a cybersecurity perspective<\/a>. Most notably, in January 2025, the company leaked<\/a> more than one million log entries, including chat histories, API secrets, and other sensitive information, through an unsecured database.<\/p>\n

DeepSeek reportedly addressed the exposure, but it still raised questions about the overall security practices surrounding the platform, particularly for organizations considering entrusting it with their own sensitive business information, Avakian pointed out.<\/p>\n

That\u2019s not to imply that every DeepSeek model is \u201cinherently malicious,\u201d he said, but there are still major questions around data privacy, the potential for information access under Chinese laws, the security of the broader AI ecosystem, and the susceptibility of DeepSeek\u2019s models to jailbreaks and manipulation.<\/p>\n

\u201cTaken together, [these issues] raise legitimate concerns about whether organizations can adequately understand and manage the risks involved,\u201d Avakian said.<\/p>\n

Enterprises should seriously assess associated risk<\/h2>\n

Enterprises are increasingly exploring DeepSeek, although most publicly-documented adoption has been in China, Avakian noted. Some DeepSeek models have also been made available through platforms like Microsoft Azure and AWS.<\/p>\n

\u201cThere\u2019s genuine enterprise interest in the technology, as organizations look for opportunities to improve productivity, offer new capabilities, or reduce costs,\u201d Avakian said. Useful applications include document summarization, internal research, and coding assistance.<\/p>\n

DeepInfer also has the potential to reduce costs, but possible benefits should be weighed against associated security risks, he pointed out. The framework was just released, so organizations are going to need to validate the claimed efficiencies in their own environments rather than assuming savings will automatically translate into lower operating costs.<\/p>\n

He encouraged organizations to start with relatively low-risk use cases, preferably using \u201cpublic, synthetic, or appropriately sanitized information,\u201d within a sandboxed environment they control themselves.<\/p>\n

The important question to ask: \u2018What is the business problem we\u2019re trying to solve?\u2019 From there, Avakian said, determine whether DeepSeek is the best way to solve it, validate security controls, and expand the use cases based on risk tolerance. Effective governance and risk assessment<\/a> are key, he noted: understand what you\u2019re bringing into your environment, validate its security, restrict its permissions, and make sure you can monitor what it\u2019s doing.<\/p>\n

\u201cApproach this like any other software supply chain decision,\u201d Avakian advised. \u201cThe fact that something is open source, inexpensive, or technically impressive doesn\u2019t automatically make it appropriate for enterprise use.\u201d<\/p>\n

Impact on the broader AI ecosystem<\/h2>\n

The fact that the Order also addressed third-party products and services developed using DeepSeek implementations is important, Avakian said, because organizations may be using DeepSeek technologies indirectly, through vendors, software platforms, or other services, without necessarily knowing what\u2019s operating underneath. \u201cThese are classic supply chain issues,\u201d he observed.<\/p>\n

It\u2019s no longer enough to know which AI applications employees are using; enterprises must understand which models, frameworks, dependencies, and external services are embedded in products they\u2019re purchasing and deploying, Avakian said. This means revisiting AI inventories, potentially updating procurement requirements, and expanding processes around third-party risk management, he advised.<\/p>\n

\u201cUltimately, enterprises leveraging these tools need to understand not only the AI technologies they\u2019re intentionally deploying, but also the technologies they\u2019re inheriting through third parties,\u201d he said.<\/p>\n

This article originally appeared on CIO.com<\/a>.<\/em><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

DeepSeek has been dealt a huge blow in the US, even as it continues to innovate and keep pace with, or in some cases outperform, rival models from American labs. The US Secretary of Homeland Security has issued an order banning all DeepSeek products and services from federal agencies. Government organizations must purge their IT […]<\/p>\n","protected":false},"author":0,"featured_media":10099,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-10098","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-education"],"_links":{"self":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/10098"}],"collection":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10098"}],"version-history":[{"count":0,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/10098\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/media\/10099"}],"wp:attachment":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}