This Week in Government Tech Media – July 17, 2026

By Brad Bass /

The government tech media covered a couple of big cybersecurity-related announcements from the Pentagon and the White House, respectively. The Pentagon put the brakes on one big cyber-focused program, while the White House launched a new one. Details below:

Now You CMMC It, Now You Don’t

A surprise announcement from the Pentagon putting a 60-day pause on the Cybersecurity Maturity Model Certification (CMMC) program had the government tech media scrambling this week. Here’s some of the coverage:

  • Covering the news in Washington Technology, Nick Wakeman wrote, “The Defense Department has essentially ended the Cybersecurity Maturity Model Certification program by suspending its second phase requirements.” 
  • In subsequent reporting, Wakeman interviewed industry sources who said they were surprised by the move despite the concerns behind it having been known for years.
  • The move will pause phase two of the program, which would have marked the first time in which companies that interact with controlled unclassified information could not have won covered contracts without passing an outside audit, Chris Riotta noted in GovInfoSecurity.
  • Lisbeth Perez reported in MeriTalk that the Pentagon will conduct a comprehensive 60-day review of the program, delaying the next phase in the multiyear cybersecurity certification rollout that had been scheduled to take effect Nov. 10. 
  • The announcement also called for “a sweeping review of the CMMC program that once again calls into question the future of the contractor cyber compliance regime,” according to coverage by Justin Doubleday in Federal News Network.
  • The action was taken after government research suggested CMMC-related policy would drive many businesses out of the defense industrial base at a time when the U.S. military urgently needs their innovations, Brandi Vincent and Mikayla Easley reported in DefenseScoop.
  • In Breaking Defense, Mark Pomerleau and Sydney J. Freedberg quoted a memo from Pentagon CIO Kirsten Davies stating, “We are not reducing cybersecurity through this measure. We are reducing the red tape.” 
  • In a separate article, Pomerleau quoted Katie Arrington, credited as the originator of the CMMC program, stating that the pause “shouldn’t be a shocker to anybody” but the Pentagon will ultimately return to the where CMMC stands now, realizing “that there really is no other way to get compliance.” 
  • Sara Friedman wrote in Inside Cybersecurity that former Pentagon Under Secretary of Defense for Acquisition and Sustainment Stacy Bostjanick issued a statement asking members of industry to respond to the department request for information regarding next steps for CMMC.
  • The editors of cybersecurity trade publication Security Week pulled together a series of industry responses to the CMMC announcement. Find those here.

Gold Eagle Takes Off

The White House took another step toward streamlining cybersecurity vulnerability protections with a new AI-based platform to help identify and remediate cyber issues across the country. We saw varied coverage of the announcement in the government tech media and beyond:

  • David DiMolfetta and Alexandra Kelly reported in Nextgov/FCW that the White House launched the Gold Eagle initiative as an AI-backed clearinghouse to consolidate software vulnerability findings from government and industry, prioritize the most consequential flaws and coordinate remediation across critical infrastructure. 
  • The initiative will provide a new AI-powered platform that fulfills a key directive in the White House’s June executive order to strengthen U.S. cyber defenses against emerging AI threats, Jerry Markon wrote in MeriTalk.
  • The platform was built by the Departments of the Treasury, Defense and Homeland Security and will work with the Software Engineering Institute at Carnegie Mellon University to handle the findings and coordinate and disseminate vulnerabilities, according to a piece by Tiffany Wang in GovInfoSecurity.
  • Jane Edwards noted in ExecutiveGov that Gold Eagle will use frontier AI capabilities to reduce duplicative scanning efforts and deliver prioritized, actionable threat and remediation information to defenders across government and the private sector. 
  • White House officials said the project is already receiving threat intelligence on cybersecurity vulnerabilities and prioritizing patching, according to an article by Derek B. Johnson in CyberScoop.
  • Cybersecurity trade publications covered the news as well. Eric Geller of Cybersecurity Dive reported that the program will deploy the nation’s vulnerability hunters and their AI tools across the widest possible range of software to avoid duplicating efforts by focusing on the same software.
  • Eduard Kovacs wrote in Security Week that the initiative stems from a White House executive order from June that called for an AI-enabled clearinghouse to identify and fix software vulnerabilities.

Upcoming Industry Events

Once again, we noted a few industry events this week we think are worth your time:

If you would like your event included in this list, please fill out this form.

That covers the biggest trending government tech stories for this week. I hope you’re finding these roundups useful. If so, please share this with a friend. And if a friend shared this with you, subscribe on LinkedIn or via the form below to receive it every week.