DHS orders DeepSeek removed from federal civilian systems
Original title: US Government Orders DeepSeek Out of Federal Civilian Systems
The July 24 order, published October 20, also covers third-party tools and services built with DeepSeek implementations.
Homeland Security Secretary Markwayne Mullin ordered federal civilian agencies to stop buying DeepSeek products and services and to remove DeepSeek, affiliate, and third-party implementations from agency IT. DHS published the Federal Acquisition Supply Chain Security Act order in the Federal Register on October 20 as document 2026-21447, 87 days after it was signed. The notice cites possible transfer of sensitive data to China and possible malware or weaknesses. Existing contracts change only after a contracting officer updates them, and exceptions require justification.
Unconfirmed: DHS says the models may transfer data to China or contain malware; that is not independently confirmed.
- The ban took effect when signed on July 24, 2026, before the public notice.
- Private users are outside the order, but contractors generally cannot use covered products on federal work without a waiver.
- DeepSeek’s privacy policy says it stores personal data in China.
- China’s Foreign Ministry objected; DeepSeek did not immediately comment to the Associated Press.
- Agencies must review the order at least once a year.
- Organizations
- Department of Homeland Security
- Countries
- United StatesChina
- AI models
- DeepSeek
From the original article
2 min read at securityaffairs.com
PHP prepares emergency patches for two critical RCE flaws, while older, unsupported versions could remain exposed without vendor fixes. The U. S.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.