Habr•September 26, 2026•🇷🇺Translated from Russian

Bill Gates Calls for Stronger External Oversight and Regulation of AI

Bill Gates has called for stronger external oversight of artificial intelligence, arguing that reliance on the goodwill of AI creators is no longer viable.

In an interview with NBC News, Gates stated that self-regulation by the industry is insufficient. He urged Congress to enact specific laws governing AI and recommended that law enforcement and policymakers become actively involved in defining guarantees and controls. While acknowledging that this approach would introduce additional bureaucracy, Gates believes it would not significantly slow down development.

Why stronger controls are needed now

Gates noted that AI has become powerful enough to cause large-scale harm if misused. He warned that AI could trigger events resulting in up to a billion deaths and described the combination of malicious actors with advanced AI tools as more dangerous than any previous weapon.

He did not advocate halting progress. Instead, he called for mandatory rules, independent checks, and ongoing monitoring, especially in high-risk areas such as medicine, finance, government systems, and other critical infrastructure.

Reactions from industry and government

Executives from Anthropic and OpenAI have also suggested slowing the pace of AI development. Former Anthropic employee Jacob Coxon publicly accused companies of acting irresponsibly and gambling with lives by racing toward self-improving superintelligence.

House Speaker Mike Johnson has indicated he prefers to wait for concrete proposals from the companies themselves. In contrast, Mark Zuckerberg opposes industry-wide coordination and maintains that individual laboratories should decide when to slow down.

Meanwhile, states including California, Maryland, and New York have started their own regulatory initiatives and are forming expert councils to address AI governance.

Practical recommendations for organizations

Organizations using AI should maintain a registry of AI tools and connected services, review prompts and data-handling scenarios, restrict access to models and internal databases, test outputs for errors and bias, log user and system actions, and prepare incident-response plans for erroneous recommendations.

Related articles

AntiMalware•Policy & Regulation

Russian Cybersecurity Market Set to Hit 455 Billion Rubles by 2026 as Talent Shortage Persists

MWS Cloud forecasts that the Russian information security market will grow 20.8 percent to reach 455.4 billion rubles in 2026. The largest segment will be software at 216.5 billion rubles, followed by services at 167 billion and hardware at 71.9 billion rubles. Demand is increasingly driven by sophisticated attacks, regulatory requirements and fines rather than import substitution alone. BI.ZONE offers a more conservative estimate of 10-15 percent annual growth. Managed security services such as monitoring, incident response and vulnerability management are leading the services segment because few organizations can maintain 24/7 in-house teams. Director Artem Gribkov of Angara MTDR estimates the personnel deficit at approximately 40 percent, especially at middle and senior levels.

AntiMalware•Policy & Regulation

Russian Internet Users Report Growing Access Restrictions as Certificate Revocations Affect 39 Percent of Respondents

A recent telephone survey conducted by Russian Field between September 23 and 30, 2026, among 1,600 participants representative by gender, age, federal districts, and settlement types shows that 39 percent of Russian internet users have noticed restrictions or complications when trying to access websites. When sites fail to open due to certificate problems, 26 percent of respondents said they would simply stop visiting the resource. The findings, published by Kod.ru, also indicate that 57 percent of users are aware that Russian websites may not load in certain browsers because of revoked foreign certificates. In response to certificate errors, 55 percent would switch browsers, 22 percent would install the required certificates, and 21 percent would try accessing the site from a mobile device. Younger users are more inclined to use VPNs or proxies, while older respondents more often choose to abandon the site. Overall, 77 percent of those surveyed expect further changes to the Russian internet segment, with only 9 percent believing it will remain unchanged.

Habr•Policy & Regulation

CISA and NSA Urge Shift to Memory-Safe Languages Like Rust to Eliminate Memory Vulnerabilities

Official reports from CISA, NSA, FBI and partners highlight that decades of safe coding practices and code analysis tools have failed to resolve memory safety issues in languages such as C and C++. Government documents cite statistics showing that 70-75% of exploited vulnerabilities and zero-days stem from memory errors, including data from Microsoft, Google Chromium, Mozilla and Project Zero. Google reports that Rust adoption in Android reduced memory-related vulnerabilities below 20% in 2025, with a 1000-fold lower vulnerability density compared to C++. The analysis details Rust's ownership, borrowing and move semantics that provide compile-time guarantees unavailable in C++, enabling stronger compiler optimizations. Reports also acknowledge migration challenges including learning curves, interop issues and ecosystem gaps, while noting ongoing C++ safety improvements targeted for C++26 and C++29. Major organizations including Microsoft, Amazon and Google are already committing to Rust for critical new code.

Habr•Policy & Regulation

Russian CA TCI Integrates ACME Protocol to Automate TLS Certificate Issuance

The Technical Center Internet (TCI), part of RTK-COD, has deployed a production ACME server compatible with standard clients such as acme.sh, Certbot and lego. The implementation aligns the ACME state machine with the existing isolated signing infrastructure, Domain Control Validation mechanisms and mandatory Certificate Transparency logging to Yandex and VK CT logs. Certificate lifetimes are shortening industry-wide, with Web PKI limits dropping to 47 days by 2029, making manual issuance unsustainable. The service supports HTTP-01 and DNS-01 challenges, ECDSA P-256 keys and certificate revocation, while preserving the requirement for Subject/CN in CSRs and mandatory revocation reasons. A separate staging environment uses an internal CT log simulator for safe testing. Future plans include full multi-SAN support, ARI (RFC 9773) and removal of the Subject/CN restriction.