securitylab_nJuly 15, 2026🇷🇺Translated from Russian

US Prepares for Free Chinese AI Models Distributed Like Torrents, Weighs Policy Shift on Open-Source Systems

The Trump administration is preparing for the emergence of powerful Chinese AI models that any user will be able to download for free from the internet, similar to torrent distribution. This scenario is prompting Washington to reconsider existing rules governing American open-source AI systems.

Officials are currently consulting with industry representatives to establish unified capability requirements for such models. Chinese systems already available in open form are being used as the reference point. American developers may be permitted to release models of comparable performance, while more advanced developments would likely face additional restrictions.

Companies anticipate that Chinese models in the Mythos class will become publicly available within the next 6–12 months. Users will then be able to run these systems on their own hardware, modify them, and embed them into other applications without any control from the original developer.

For the United States this creates a difficult policy challenge. Harsh prohibitions could slow domestic companies without stopping the spread of foreign technologies. China is already actively developing open neural networks and distributing them freely to strengthen the international position of its developers. Some Chinese systems have gained rapid popularity after restrictions were placed on American models, largely because they remain accessible and cost less.

Simultaneously, technology companies are seeking ways to reduce electricity consumption in data centers. These facilities currently account for approximately 1.5% of global electricity usage, and the International Energy Agency expects demand to continue rising quickly.

The Washington Post observes that long-term forecasts may prove overstated. Companies are testing superconducting cables capable of transmitting more energy with lower losses, as well as optical connections that move data using light instead of electrical signals. These technologies could significantly cut the energy required to transfer information between computing devices.

Because the new solutions have not yet been deployed at scale, real-world savings remain difficult to quantify. Nevertheless, progress in superconductors and optical systems indicates that growth in computing power will not necessarily produce an equally sharp increase in electricity consumption.

Related articles

AntiMalwarePolicy & Regulation

Microsoft Removes Reinstallation Requirement for Enabling Smart App Control in Windows 11

Microsoft has eliminated the primary restriction on Smart App Control, allowing home users to activate or reactivate the Windows 11 security feature without performing a clean installation of the operating system. Previously, toggling the setting effectively required users to reinstall the entire system. Smart App Control leverages Microsoft's cloud-based reputation system and analyzes digital signatures to block suspicious, potentially dangerous, or unsigned files before execution. The toggle is now accessible through Windows Security under App & browser control. The update is being rolled out gradually via Windows 11 updates, though users who have disabled optional diagnostic data may still need a reset or reinstallation. The feature can interfere with developers and enterprise users working with rare or unsigned tools, as there is no option to whitelist individual blocked applications.

AntiMalwarePolicy & Regulation

Russian State Operators Must Report Cyber Incidents to FSB Within 24 Hours From September 2026

Starting 1 September 2026, operators of state information systems in Russia will be required to notify the National Coordination Center for Computer Incidents within 24 hours of detecting a cyber incident. The mandate is set out in FSB Order 297 and applies to operators of GIS, information systems of state bodies, state unitary enterprises and state institutions. The order places particular emphasis on incidents involving unauthorized data transfers. Organizations will interact with GosSOPKA through the technical infrastructure of NKTsKI, which will issue an incident identifier upon receipt of the report. The new rules formalize what was previously considered good practice and stem directly from Law 568-FZ adopted in December 2025. The requirement removes any possibility of delaying notification to the FSB.

HabrPolicy & Regulation

Trusting Russian Root Certificates and Monitoring Domestic CT Logs

The article examines risks associated with installing Russian root certificates issued by the Ministry of Digital Development. It explains how these certificates, when trusted, enable potential MitM attacks through TSPU infrastructure by allowing on-the-fly issuance of fraudulent certificates for foreign domains. Yandex Browser stands out by enforcing Certificate Transparency checks for domestic certificates, unlike other browsers that disable CT validation in the presence of added roots. Three primary domestic CT logs are maintained by Yandex, VK, and the Ministry, with log lists updated annually. A Python script is provided to query these logs directly and verify SCT inclusion for any certificate. The piece also notes limitations of existing web monitors such as ct.tlscc.ru when dealing with newer log endpoints.

HabrPolicy & Regulation

Why Legitimate Russian Websites Fail to Load With or Without VPN: TSPU RKN Blocking and MinTsifry Certificates Explained

Russian internet users are experiencing widespread access issues to legitimate domestic websites both when using VPNs and when connecting directly. The problems stem from TSPU devices installed by all ISPs under Roskomnadzor requirements and the transition to national MinTsifry certificates that foreign browsers do not trust. Three distinct error scenarios are documented: ERR_CONNECTION_TIMED_OUT when accessing Russian-IP sites over VPN, ERR_CERT_AUTHORITY_INVALID on major bank sites without VPN, and partial page loading failures caused by TSPU fingerprinting. Solutions for ordinary users include split-tunneling VPN clients, installing MinTsifry root certificates, or switching to Yandex Browser and Chromium-Gost. Website owners are advised to disable TLS 1.3, enable HTTP/2 support, and consider changing server IP addresses if SSH connections are also blocked. The article explicitly excludes any discussion of circumvention methods for prohibited content and focuses only on legal Russian resources as of August 2026.