UK cyber bill targets AI users, not the vendors building it

The UK government is rejecting proposals to include AI vendors within the Cyber Security and Resilience (Network and Information Systems) Bill, arguing that regulating AI providers would not effectively prevent misuse by hostile actors. Instead, the government is focusing on other measures, such as supporting the AI Security Institute and the voluntary AI Cyber Security Code of Practice. Despite these efforts, concerns remain about the potential for AI-driven cyberattacks and the lack of regulatory oversight for AI systems. The bill aims to update existing cybersecurity regulations for critical infrastructure, but has faced criticism for excluding certain entities, including government agencies.