Russian Officials Call for Embedding Fear and Conscience Mechanisms into Generative AI
At the BIS Summit conference focused on information security for business and IT, Russian officials proposed adding human-like safeguards to generative artificial intelligence. Deputy Minister of Digital Development Alexander Shoytov stated that current GenAI systems lack any fear of making mistakes.
"In AI, a system of fear must be embedded so that it is afraid to make an error, just like a human," Shoytov said during the panel. The concept does not involve a trembling neural network worried about mortgages or conversations with a boss. Instead, it refers to a built-in mechanism of doubt that allows the model to assess the consequences of its actions, admit when data is insufficient, and stop if the potential cost of an error is too high.
Generative AI today can confidently deliver incorrect answers, invent facts, and carry out risky commands without any internal sense of danger. For ordinary chatbots this results in hallucinations, but for AI agents connected to corporate systems the outcome can be deleted files, data leaks, or operational failures in critical infrastructure.
Another ambitious proposal came from Nikolay Lishin, Deputy Head of FMBA Russia. He suggested embedding not only fear but also a form of conscience into AI models. While fear would prevent errors, conscience would help the system judge whether an action itself is permissible.
The resulting technical portrait of an ideal AI system is one that is intelligent enough to solve tasks, sufficiently cautious to double-check everything, and conscientious enough to refuse when necessary. The remaining challenge, officials noted, is translating these requirements into concrete technical specifications.
Related articles
AI Agents Becoming Core InfoSec Skill Like Microsoft Office Proficiency
Working with AI in information security is shifting from a specialized skill to a baseline expectation similar to using Microsoft Office tools. The key difference lies in the cost of errors: poor Word usage wastes time, while mishandling AI agents burns subscription limits and corporate funds. The article details practical workshops from the Engineering October series covering AI agents from beginner tools to securing the agents themselves. Core concepts include distinguishing models from agents, managing context windows to prevent forgotten instructions, and using skills, MCP connectors, and sub-agents for efficiency. Real-world examples show agents handling CVE analysis, alert triage, and threat report reviews while highlighting risks like hallucinations and data exposure. Guidance covers safe deployment in isolated environments and the irreplaceable role of human expertise in strategy and verification.
Research Exposes Limitations in AI Skill Scanners for Agent Vulnerability Detection
An independent researcher evaluated three local vulnerability scanners for AI agent skill packages without using LLMs or external APIs. The test used 12 synthetic packages containing both benign and malicious instructions, including attempts to bypass consent via sub-agents and hidden instructions in nested files. Cisco Skill Scanner, NVIDIA SkillSpector, and AgentVerus were run in isolated containers. All three tools missed a critical delegation bypass in package 10, while correctly flagging an educational attack citation in package 5 as High severity. NVIDIA SkillSpector performed best on nested file detection, and the findings directly shaped the integration of a lightweight static analyzer plus optional NVIDIA scans into the CEO AI project. The study also highlighted the need to preserve detailed findings rather than relying solely on final safety scores.
Apple Tightens App Store Rules Against Non-Consensual Intimate AI Deepfakes
Apple has updated its App Store guidelines to explicitly prohibit applications that generate intimate deepfake images of real individuals without consent. Developers must now implement measures to prevent creation and distribution of such content and promptly remove any instances that appear. The company also banned the practice of submitting apps with hidden functionality that is activated after passing review, a tactic previously used by undressing services. Violations can result in both app removal and expulsion from the Apple Developer Program. The move follows similar actions against xAI's Grok chatbot, which added safeguards after Apple threatened removal over the same issue. The policy targets non-consensual intimate imagery rather than all deepfake technology.
CyberXero Deploys 51 AI Agents to Scan 4708 Targets and Implant 32 WebShells in 61 Seconds
Russian-speaking initial access broker CyberXero integrated Anthropic's Claude Code and the open-source PentAGI autonomous penetration agent into its attack pipeline, creating a cluster of 51 specialized AI agents. The group ran two parallel operations: one automated campaign targeting vulnerable WordPress and e-commerce sites worldwide using known exploits including CVE-2026-63030, CVE-2026-60137 and CVE-2026-4815, and a second, more targeted campaign against Ukrainian energy and critical infrastructure. In one recorded execution the AI cluster scanned 4708 public-facing hosts, compromised 429 WordPress administrative panels and dropped 32 WebShells within a 61-second window. Attackers bypassed model safety guardrails by resetting sessions and reframing requests as authorized penetration tests of their own infrastructure. The operation relied on an eight-node architecture that included a Linux workstation, configuration server, payload staging server and public Redis instances, two of which belonged to Chinese organizations. SOCRadar warns that session-level controls alone are insufficient and recommends enforcing system-level boundaries, minimal privileges and strict egress filtering for any AI agents.