Research security

DOJ’s Data Security Program restricts bulk sensitive-data transfers to countries of concern and reaches university data-sharing and vendor agreements.

The 2024 USG DURC-PEPP policy remains the operative framework for institutional biosafety committees even after a May 2025 executive order directed federal agencies to revise or replace it — no superseding text has been issued as of this writing. Here is what IREs, IBCs, and RA offices need in place right now.

Five frontier models now trade the lead by task and price: Opus 5, Fable 5, GPT-5.6, Grok 4.6, Kimi K3. What that means for institutional AI policy.

KAIST researchers have built APT-RL, a control system that lets their HOUND quadruped robot choose its own gait — trotting or bounding — in real time across stairs, slopes, and forest terrain, reaching peak speeds of about 6 m/s. The paper’s author list, published by KAIST in Science Robotics, names both Korea University and South Korea’s Agency for Defense Development as co-author affiliations — an explicit funder/affiliation transparency case study for research-administration readers tracking dual-use disclosure.

Google DeepMind’s Gemini Robotics 2 gives humanoid robots coordinated whole-body control, but the notable part for research administrators is what shipped alongside it: a dedicated Safety Technical Report and a new ASIMOV-Agentic benchmark testing whether the AI will refuse unsafe commands and escalate to a human when uncertain. DeepMind also validated the system across independently-made hardware, including Apptronik’s Apollo 2, Franka Duo, and platforms from Dexmate, SO101, and Trossen, alongside partners Boston Dynamics and Agile Robots.

Stanford researchers used the Evo genome-language model to design 16 functional synthetic bacteriophages from scratch, and biosecurity specialists warn the AI-generated genomes evade existing DNA-synthesis screening tools built on known-pathogen databases.

HD Hyundai Heavy Industries has completed the ninth and final ITER vacuum vessel sector, closing out a manufacturing effort split across South Korea and the EU’s procurement shares. The milestone highlights how ITER’s seven-member treaty structure (EU, US, Japan, China, Russia, India, South Korea) governs technology transfer, IP, and export control across members with sharply different bilateral trade-control relationships.

University of Minnesota researchers built SpudCell, a synthetic cell assembled entirely from nonliving chemistry, with a 90kb genome that grows, divides, and evolves through Darwinian selection — with no living-cell scaffolding. The team also launched Biotic, a nonprofit to keep the underlying methods openly shared.

SaxonQ, a Leipzig startup, has opened orders for room-temperature diamond NV-center quantum computers that need no dilution refrigerator — a hardware shift with implications beyond the lab.

Two variola virus genomes recovered from 500-year-old Chilean mummies expand known sequence diversity for a select agent through archaeological DNA recovery, not live-virus handling — an edge case dual-use oversight was not written to cover.

The USG Policy for Stopping High-Risk Life Sciences Research (July 2026) replaces the 2024 DURC/PEPP framework with new DGOF and IROC rules, institutional certification and monitoring duties, and a 120-day agency guidance deadline.

China’s MOFCOM added a Polish university to its dual-use export control list — a first for EU higher education. What it restricts and why it matters.

OpenAlex fixed 6,191 mismatched affiliations across 192 watch-listed orgs, exposing a data-quality risk in research-security screening.

On August 3, 2026, Education Secretary Linda McMahon asked every university president and governing board to publish, by year-end, a public statement across seven areas — including safeguarding research from foreign influence and prioritizing American interests. There is no funding condition and no enforcement mechanism. Here is what the two research-facing asks actually mean for research offices, and how the letter differs from the failed 2025 Compact for Academic Excellence.

A June 2026 House Science subcommittee hearing examined FCA grant-fraud enforcement, spotlighting undisclosed foreign affiliations as a growing DOJ target.

On Feb 27, 2026, the EU Commission issued its first Research Security Monitor plus a Council Recommendation on science diplomacy, adopted May 29, 2026.

Texas HB 127 (not SB 1565) sets an August 2026 research-security certification deadline for Texas public university boards.

GAO: 5 top research-funding agencies havent assessed whether security screening risks discriminating against Chinese and Asian-descent scientists.

The House-passed DETERRENT Act would cut the Section 117 foreign-gift threshold to $50,000. A 26-group coalition pushed the stalled Senate bill in May 2026.

BIOSECURE Act became law Dec 18, 2025 (NDAA Sec. 851), restricting federal contracts and grants tied to designated biotechnology companies of concern.

The EU’s February 2026 Research Security Monitor and forthcoming Centre of Expertise add EU-wide policy coordination beyond Horizon Europe grant screening.

A Nov. 2025 OpenReview bug exposed ICLR 2026 reviewer identities, enabling bribery and harassment amid separate reports that 21% of reviews were AI-generated.

EO 14411 (June 22, 2026) tightens research-security and export-control coordination for quantum research. What it means for QIST funding and tech transfer.

The SAFE Research Act would have cut federal funding over ‘hostile foreign entity’ ties. University pushback got it struck from the FY2026 NDAA.

Commerce cut, then restored, foreign access to Anthropic’s Fable 5/Mythos 5 over a jailbreak claim — what it means for research-security compliance.

The Netherlands fully revised its National Knowledge Security Guideline on 9 July 2026, updating the threat assessment and adding a risk-indicator appendix.

Five researchers, including Harvard geneticist George Church, were moved off a Nature Methods byline into acknowledgements amid U.S. scrutiny of China ties.

A 2.7-million-preprint IEEE S&P 2026 study found 88% of arXiv submissions leak hidden source-file data: passwords, API keys, GPS coordinates.

NSF 26-022 bars NSF-funded collaboration with entities on seven federal restricted-party lists, starting FY2027. Here’s what it does and doesn’t cover.

OMB’s May 2026 proposed rule would bar federal grant funds from collaboration with “covered foreign countries.” Here’s what the rule’s text actually says, why the widely-cited “17 countries” figure isn’t a real OMB list, and how this differs from the CHIPS Act’s countries-of-concern list.

BIS’s 2026 settlements, led by a record $252.5M Applied Materials case, reveal what triggers export-control violations for research institutions.

COGR’s June 2026 meeting included a GAO briefing flagging research security as a top oversight area. What’s confirmed, and what it means for research admins.

Executive Order 14292 (May 2025) paused federal funding for dangerous gain-of-function research and set OSTP deadlines for oversight rules, now overdue.

A March 2026 law-firm alert warns the fundamental research exclusion is quietly narrowing for universities. No BIS or Federal Register rule change was found to confirm that framing — here’s what’s actually enacted (NSPM-33, Section 117, the BIOSECURE Act) versus what’s still just a warning.

NSF’s PAPPG 26-200 supplement (eff. Dec. 8, 2025) revised SBIR pitch rules, funding caps, equipment thresholds, and research-security requirements.

ED’s Feb. 23, 2026 pact with State adds national-security review to Section 117 foreign-gift oversight. Thresholds and deadlines are unchanged.

Federal agencies now require ORCID as a digital persistent identifier; universities are setting their own 2026 linkage deadlines ahead of enforcement.

NSPM-33’s $50M research security program deadline isn’t one fixed July 2026 date — it’s agency-specific. Plus DoD’s Jan. 2026 memo, explained.

DHS’s new rule ends open-ended F-1/J-1 admission, capping it at up to 4 years and requiring a separate USCIS extension filing, effective Sept. 15, 2026.

Where 2026 litigation over SEVIS record terminations and visa revocations stands, and what it means for international researchers.

NSF Notice 149 makes research-security training, MFTRP, and Confucius Institute certifications mandatory for proposals, effective Dec. 2, 2025.

Eighteen months after NSPM-33 disclosure requirements took effect, a status report on what worked, what is broken, and the institutional adjustments still pending.

Current and pending support, foreign-component disclosure, NIH Other Support, foreign-talent-recruitment programmes: the 2026 NSPM-33 compliance landscape.