Natalia Kaspersky Questions Trustworthiness Criteria for Generative AI
Natalia Kaspersky has cast doubt on whether generative AI can ever meet conventional standards of trustworthiness. Speaking at the BIS Summit in an interview with Anti-Malware.ru correspondent Olesya Afanasyeva, the chairwoman of ARPP Domestic Software described the very notion of trust for such systems as an unresolved puzzle.
According to Kaspersky, a trusted system must function within strictly defined parameters and produce consistent, predictable outcomes. Generative AI does not satisfy this requirement because it cannot guarantee identical results on repeated queries. “The criterion of trustworthiness as applied to generative artificial intelligence remains a mystery to me,” she stated.
The core difficulty lies in the sheer scale of contemporary models. With billions of parameters and vast training datasets, exhaustive validation becomes infeasible. While individual answers or scenarios can be tested, such partial checks do not demonstrate the reliability of the entire system.
This situation creates a practical dilemma for both business and government: how to rely on technology whose behavior cannot be fully verified. Kaspersky noted that the task of building trusted AI has been officially set, yet no concrete methodology currently exists. She called for coordinated work among AI researchers, information security professionals, methodologists, and standards developers to address the gap.
Related articles
Zscaler Report Details How Generative AI Accelerates Custom Malware Creation and Social Engineering
Zscaler published an analysis on October 16 examining the use of generative AI by attackers for social engineering, data discovery, and malware development. Principal security researcher Phil Hagen notes that the report focuses on broad methods rather than naming specific malware families or confirmed campaigns. The core observation centers on the dramatically increased speed at which malicious scripts can be written and iteratively revised. Traditional detection that relies on matching files or traffic against known patterns loses effectiveness when code is frequently altered while preserving the same functionality. The analysis clarifies that observed rapid creation and revision does not equate to fully autonomous self-mutating malware that changes on every execution. Another impact is the disappearance of classic indicators such as spelling and grammar errors in phishing messages, which previously helped identify malicious intent. Zscaler recommends focusing on behavioral analysis of what programs actually do rather than solely relying on matches to previously catalogued samples.
AI Agents Using Claude and Grok Fully Automate Attacks on 400 Latin American Financial Institutions
A Straiker investigation has revealed that the CyberCartel hacking group built an AI agent network driven by multiple large language models to conduct fully automated attacks against more than 400 Latin American banks and payment applications. The system incorporates models from Anthropic and xAI, with CrowdStrike confirming additional use of DeepSeek. The AI agents independently perform reconnaissance across hundreds of targets, steal credentials through adaptive techniques, take over accounts while mimicking human behavior to evade detection, and monetize stolen data with minimal human intervention. This development marks a sharp drop in attack costs, allowing scalable operations that were previously impractical due to high manual effort. Defenders are advised to deploy dynamic behavioral baselines, enforce zero-trust architectures, strengthen multi-factor authentication and transaction monitoring, and incorporate AI adversary simulations into red-team exercises. The report is described as one of the first detailed public records of such end-to-end AI-driven financial attacks.
Registration Opens for SOC Forum 2026 with Focus on GenAI and Cybersecurity Risks
GC Solar has opened registration for SOC Forum 2026, the central event of the Russian Week of Cybersecurity. The two-day conference will take place on 27-28 October at the Lomonosov cluster in Moscow and will examine both the economic benefits and the security challenges of generative AI. Day one covers business impact, regulatory questions, data control, liability for AI errors, and new threat vectors. Day two shifts to hands-on technical tracks covering attack detection, defensive infrastructure development, and the use of AI by both attackers and defenders. The program includes dedicated tracks such as AI & Cybersecurity, Offence, Defence, and SOC-practicum. Organizers emphasize practical discussions over marketing presentations about neural-network images.
AI Investigators in SOCs: Limits of Autonomy, Prompt Injection Risks, and the Cost of Over-Reliance
A February 2026 Vectra AI survey of 1,450 security professionals revealed that organizations receive nearly 3,000 daily attack alerts on average, with 63% left unprocessed and 71% of respondents delaying critical tasks at least two days a week. The article examines the push to deploy autonomous AI agents for investigations in Security Operations Centers, highlighting how such systems often fail when confronted with real-world disorder such as inconsistent server timestamps, unapproved software installations, and incomplete logging. It stresses strict limits on AI decision-making authority, especially for blocking systems or revoking access, and warns against treating model confidence scores as reliable error probabilities. Prompt injection attacks via malicious emails, logs, or documents are identified as a novel threat that can manipulate language models into ignoring attacks or leaking data. Research from Microsoft involving 167 analysts showed that false “safe” verdicts from AI increased missed threats by 29 percentage points. The piece concludes that independent human verification of AI-closed cases remains essential to avoid hidden risks behind empty alert queues.