Russian Finance Ministry Seeks Central Bank Reports on Systematic P2P Transfers to Tax Authorities
The Ministry of Finance wants the Central Bank of Russia to forward information to the Federal Tax Service about citizens whose account activity indicates systematic receipt of funds from other individuals.
The proposed amendments, submitted for the second reading of bill № 617-9, modify article 85 of the Tax Code. They would oblige the Central Bank to report persons identified through analysis of banking operations that display characteristics of regular income from private persons.
Details on selection criteria, data format, and transmission frequency will be defined in a separate agreement between the Central Bank and the Federal Tax Service. The measure expands the tax authority’s ability to request account statements from individuals without entrepreneur status, removing the previous requirement for debt recovery, tax audits, or senior management approval.
If enacted, the rules would enter into force on 1 January 2027 and cover transactions performed after 1 January 2026. The State Duma Budget and Taxes Committee is scheduled to review the amendments on Sunday.
Related legislation includes bill № 32298-9, which would require banks from March 2028 to cap incoming transfers at 30,000 rubles per month for clients suspected of questionable operations, and a government bill obliging the Federal Tax Service to inform the Central Bank about account openings, closures, and income categories.
Related articles
How a Personal Site Counts Bots Without Storing Any IPs: Pure PHP, No Database, Strict CSP and 160 Tests
A personal website built entirely in pure PHP without frameworks or databases demonstrates advanced defensive security practices while tracking bot activity from an SSH honeypot. The site stores all content in a single JSON file with atomic writes and automatic backups, eliminating database-related attack surfaces and simplifying deployment to folder copying. Strict Content-Security-Policy rules prohibit inline styles and scripts without nonces, forcing the use of SVG attributes, CSSOM updates, and JSON data blocks instead of direct attribute injection. Over 160 automated tests written in PHP attack the site with XSS payloads, CSRF attempts, path traversals, and malformed Markdown to verify that no malicious output reaches the browser. Bot identification relies on behavioral signatures derived from the first twelve cleaned commands of each session, combined with HASSH fingerprints and activity patterns, allowing the site to report unique bot families and address counts without ever publishing IPs. Additional browser-based tests using Chromium validate accessibility, performance budgets, and CSP compliance across desktop and mobile viewports. The entire system runs with zero external dependencies and integrates tests directly into the deployment pipeline.
Baidu Launches Ciyuan Exchange to Establish Trust Standards for AI Model Trading
Baidu Intelligent Cloud has introduced the Ciyuan Exchange, a dedicated trading platform for large AI models that aims to solve quality verification and credit issues in an increasingly crowded market. The platform, unveiled at the Baidu World 2026 Conference, already hosts over 100 supply resources with daily calls exceeding 50 million and daily token usage surpassing 700 billion. Founder Li Yanhong positioned the exchange as an infrastructure layer that moves beyond simple model aggregation toward verifiable identity, ongoing performance monitoring, and supplier credit records. The initiative addresses real procurement risks where identical models from different providers show up to twofold differences in throughput and reliability, according to a China Academy of Information and Communications Technology report. By combining model fingerprinting, capability testing, periodic audits, and continuous credit scoring, the platform seeks to create transparent market mechanisms similar to commodity exchanges. This development signals a broader industry shift from raw model capability competition toward standardized service quality, pricing transparency, and reliable delivery infrastructure.
Windows and MacBook Pro Setup Combines Local Network Access with Dual VPNs and Kill Switch Protection
A user detailed how they integrated an older MacBook Pro into an existing Windows workstation environment while preserving separate user accounts, file sharing, and independent VPN connections. The setup required careful routing configuration to keep the Kill Switch active on both Amnezia VLESS and AmneziaWG without breaking local SMB connectivity. After initial failures caused by the Windows Kill Switch blocking the 192.168.1.0/24 subnet, split tunneling was implemented to route local traffic directly. Separate macOS accounts were created for daily use and a dedicated “Serverok” account for remote scripting and compute tasks. SSH and SFTP ultimately replaced problematic SMB shares for the secondary account, enabling reliable file transfers at over 50 MB/s. The configuration allows simultaneous or sequential use of both machines while maintaining strong VPN protection on each.
RuCenter Prepares DNS Guard Launch for Early Cyber Threat Detection
RuCenter is developing DNS Guard, a new system designed to detect cyber threats at the DNS level before they cause disruptions to websites and corporate services. The tool will combine DNS traffic analysis, monitoring of domain record changes, and validation of DNS zone configurations. According to RuCenter’s 2026 research, 53.4% of companies experienced domain-related incidents, while only 31.5% maintain formalized domain management policies. DNS Guard will track suspicious changes to records affecting websites and email, identify forgotten subdomains vulnerable to takeover, detect anomalous queries, audit zone settings, and send alerts on critical events. The system leverages RuCenter’s own DNS infrastructure to spot recurring anomalies across multiple zones and targets medium and large enterprises managing numerous domains, with planned API integration for corporate security platforms.