US Department of Homeland Security Orders Federal Agencies to Remove DeepSeek Products

The US Department of Homeland Security issued an order on October 19 requiring federal civilian agencies to cease purchasing products from DeepSeek and to remove related technology from government systems. The directive, published the following day, targets Hangzhou DeepSeek Artificial Intelligence, its affiliates, and any third-party products or services built on DeepSeek implementations. The measure stems from the Federal Acquisition Supply Chain Security Act of 2018 and follows a recommendation by the Federal Acquisition Security Council, though no specific incidents or evidence were detailed in the notice. The restriction applies only to federal environments and does not prohibit private sector or individual use outside government systems. No removal deadline was set, and the document does not name the signing authority. The order is filed under docket DHS-2026-0628 with the CISA implementation team listed as the contact point.

BoletimSecOctober 21, 2026Translated from Portuguese

Read at source

The US Department of Homeland Security has directed federal civilian agencies to stop acquiring products from DeepSeek and to remove the technology from their systems. The order was formally issued on October 19 and published the next day.

The directive covers Hangzhou DeepSeek Artificial Intelligence, its affiliates, and any third-party products or services developed using DeepSeek implementations. Affiliates are defined according to the Federal Acquisition Regulation. This broad scope means agencies must also address software from other vendors that incorporates DeepSeek technology, even though no public list of affected suppliers was provided.

The legal basis is the Federal Acquisition Supply Chain Security Act of 2018 and its implementing rules. The decision followed a recommendation from the Federal Acquisition Security Council, supported by evidence that was not described in the public notice.

The order does not cite any specific intrusion, stolen government records, or confirmed data breach. It also sets no deadline for removal and does not identify the signing official. The document appears in docket DHS-2026-0628 on the federal rulemaking portal, with the CISA implementation team designated as the contact.

The restriction is limited to the federal supply chain and does not extend to private companies or individuals using DeepSeek outside government environments. As of publication, DeepSeek had not issued a public response.

CISA DeepSeek DHS Federal Acquisition Regulation DHS-2026-0628

ShareX Facebook LinkedIn Reddit

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Policy & Regulation

Policy & Regulation

Russian Minister Proposes Blocking All SIM Cards Linked to Fraudsters Banned in MAX Messenger

The head of Russia's Ministry of Digital Development, Maksut Shadaev, has suggested extending account bans in the MAX messenger to a broader set of mobile restrictions. Under the proposal, operators would be required to disconnect not only the number used in a fraudulent account but also any other SIM cards belonging to the same individual. The measure would also introduce a cooling-off period preventing the person from registering new numbers after a ban. Officials aim to make it significantly harder for scammers to resume operations following enforcement actions. Key implementation details, including how ownership and involvement in fraud will be verified, remain unspecified in the initial statement. The initiative specifically targets fraud prevention and does not apply to every account suspension in the messenger.

AntiMalwareOct 29, 2026Translated from Russian

Policy & Regulation

Russia Ready to Disclose Source Code of Social Networks, Messengers and AI Models

Russian Minister of Digital Development Maksut Shadaev announced that the country is prepared to open the source code of its domestic social networks, messengers, and video services to international partners. Shadaev stated that Russia will show the internal structure of these platforms and allow joint modification of algorithms. The proposal was presented at the Platform of Sovereign Development exhibition and reported by TASS. He contrasted Western IT products, described as opaque black boxes, with Russia's new approach of transparency to avoid what he called digital colonialism. The same offer extends to Russian foundational AI models, which could be adapted to foreign legislation, cultural requirements, and security standards. No specific products, repository links, timelines, or licensing terms were provided during the speech.

AntiMalwareOct 29, 2026Translated from Russian

Policy & Regulation

Russia Mulls Mandatory Two-Week IMEI Registration for Foreign Smartphones via Gosuslugi

Russian authorities are discussing a new rule requiring owners of smartphones imported without customs clearance or purchased abroad to register the devices through the Gosuslugi portal within two weeks. Failure to register would result in the device being blocked from Russian mobile networks. The Ministry of Digital Development is preparing the requirements, which remain under discussion with possible changes to timelines and details. Devices already operating in Russia before April 2027 would be exempt and continue working without restrictions. Officially imported equipment would be added to the registry automatically. The measure is expected to significantly impact gray-market sellers, potentially forcing up to 70 percent of them out of the market and driving price increases of up to 40 percent for some models.

AntiMalwareOct 29, 2026Translated from Russian