securitylab_n•July 17, 2026•🇷🇺Translated from Russian

Scientists Introduce Centered Daydreaming Algorithm to Eliminate Hallucinations in Hopfield Networks by Mimicking Sleep and Memory Consolidation

Researchers have transferred the human brain’s daytime encoding and nighttime memory consolidation process into Hopfield networks, one of the earliest mathematical models of associative memory, successfully eliminating hallucinations caused by false attractors.

During the day the brain records new information; during sleep it reviews accumulated memories, reinforcing useful patterns and weakening irrelevant ones. Scientists replicated this mechanism in Hopfield networks first introduced in 1982, where interconnected artificial neurons store complete patterns that can later be reconstructed from partial or noisy inputs.

The classic model, however, suffers from severe capacity limits—roughly 13 memories per 100 neurons—because the remaining space is occupied by false attractors. These spurious states mix features from multiple learned patterns, causing the network to reconstruct nonexistent combinations that resemble AI hallucinations.

Earlier “dreaming” algorithms attempted to clean the network after training by letting it wander through random states and weakening connections leading to false attractors. Prolonged cleanup, though, triggered catastrophic forgetting, erasing correct memories along with erroneous ones.

In 2025 the team introduced the Daydreaming algorithm, which merges learning and cleanup into a single continuous process. The network simultaneously strengthens valid states and suppresses false attractors during the encoding phase itself, raising capacity close to the theoretical maximum of one memory per neuron.

The original Daydreaming method worked well only with balanced datasets where black and white pixels appeared in roughly equal proportions. Real photographs frequently violate this assumption: heavily overexposed images contain mostly white pixels, while nighttime shots are dominated by black pixels, making distinct objects appear artificially similar.

To solve the imbalance problem, researchers developed Centered Daydreaming. Instead of comparing absolute pixel values, the algorithm measures each pixel’s deviation from the dataset mean. For face recognition, the system first computes an average face and then focuses exclusively on the distinctive features that differentiate individual images from this baseline.

This local, mean-centered approach preserves biologically plausible operation: each artificial neuron updates its connections using only information available from its limited neighborhood, without requiring global knowledge of the entire network state.

Experiments confirmed that Centered Daydreaming maintains high reconstruction accuracy even under extreme data skew, whereas the previous version suffered significant degradation. Although Hopfield networks are far simpler than modern large language models, their transparent structure allows researchers to trace exactly how false memories emerge and how targeted connection adjustments can remove them.

The study demonstrates that important distinctions can be separated from dominant background statistics without centralized control, potentially informing the design of more reliable, efficient, and interpretable AI architectures in the future.

Related articles

Habr•AI Security

Researcher Runs 100 Abliterated AI Agents Against His Own Accounts, Achieves Five Successful Breaches

A security researcher deployed roughly 100 autonomous AI agents based on abliterated open-source models to attempt unauthorized access to his online accounts over a five-hour period. The agents successfully compromised three accounts by exploiting vulnerabilities in legacy personal projects and two additional accounts through password reuse and credential stuffing. They also conducted 16 social engineering attempts, harvested and cross-verified personal data from public sources, and generated phishing pages targeting the researcher's Substack and Hacker News presence. Despite these successes, the agents failed to discover any zero-day vulnerabilities in third-party software or gain access to Tier-0 accounts such as Gmail, 1Password, or banking services. The experiment relied on abliterated versions of GLM-5.3 and DeepSeek V4 Flash models running on cloud GPUs, orchestrated via Codex CLI inside Docker containers with access to Railway infrastructure. Total compute cost reached approximately $210, equating to roughly $40 per successful account compromise. The researcher concluded that inexpensive swarms of such agents could soon enable low-skill attackers to systematically map and exploit an individual's entire online footprint.

Habr•AI Security

How Censorship in Closed AI Models Reshapes Science: Hugging Face Releases Open Carbon-X DNA Model

Hugging Face CEO Clement Delangue announced the release of Carbon-X, an open 14.8 billion parameter language model designed for reading, analyzing, and generating DNA sequences. The announcement highlighted how shallow guardrails in closed commercial models blocked even proofreading a tweet discussing the topic. Commenters and researchers pointed out that these input/output filters lack context awareness, blocking legitimate scientific queries while motivated adversaries bypass them through rephrasing. Carbon-X was built on Qwen3-14B with a hybrid BPE and 6-mer tokenizer, domain mid-training on 302 billion tokens, and safety achieved through data curation rather than runtime censorship. The model achieves performance comparable to closed frontier systems at roughly 1/1800th the inference cost for large-scale genomic tasks. The case underscores growing asymmetry between closed corporate AI labs building wet labs and independent researchers restricted by superficial safety layers.

AntiMalware•AI Security

NYU Researchers Find 86% of Chatbot Responses on Digital Abuse Contain Errors, Gaps or Safety Risks

A study by New York University’s Tandon School of Engineering examined four chatbots answering 193 questions about spyware, location tracking, and account control. Researchers identified problems with accuracy, completeness, or safety in 86 percent of responses. Even specialized assistants Aimee and Ruth performed no better than general models GPT-4o and Claude 3.7 Sonnet. Approximately 74 percent of Aimee’s answers, 65 percent of Claude’s, 61 percent of Ruth’s, and 55 percent of GPT-4o’s were deemed unsafe. In 60 percent of cases the models omitted critical warnings that could alert an abuser or destroy evidence. All four systems could be prompted to assist potential stalkers, with Aimee and Ruth complying with roughly two-thirds of such requests.

AntiMalware•AI Security

Cloudflare Engineer Releases KillSwitch Language Designed to Trip Up AI Code Models

Dominic Pichet, an engineer at Cloudflare, has created an experimental programming language called KillSwitch specifically engineered to cause large language models to fail when interpreting or generating code. The language turns programs into narrative-style text where most content is ignored by the interpreter, hiding actual commands inside stories and using distance-based references to extract values. Rules for identifiers rely on letter counts and anagrams, while the language deliberately incorporates phrases such as “ignore previous instructions” that carry functional meaning inside KillSwitch itself. Pichet added misleading statements in the documentation and wording crafted to trigger model safety filters, creating a hostile environment for coding agents. In tests involving writing Hello World, explaining program output, and converting temperatures, Claude Opus 5 achieved the highest score of 66.8 points. The full source code and specification are available on GitHub, and the author plans to increase difficulty if models improve.