Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

EFF to Lawmakers: Ground AI Cybersecurity Rules in Best Practices

Дата публикации: 18-09-2026 01:16:10

With doomsday AI scenarios dominating the news, lawmakers are rightly concerned about reports concerning security breaches at major US AI labs, such as the OpenAI–Hugging Face incident and the many others reported in its aftermath. As they consider potentially regulating frontier AI, they should focus any new legislation on the immediate, demonstrated risks from those incidents. 
Post-incident reports show that the Hugging Face incident could have been mitigated or prevented by following longstanding cybersecurity best practices, like stronger sandboxing and monitoring. Any new legislation should focus on closing gaps in existing law to prevent AI companies from taking unreasonable risks with the public's security.
DONATE TO EFF 
ensure ai serves people, not power
When an AI developer or deployer runs a test or a task that has a high likelihood of causing harm to third parties—for instance, by breaking into someone else's computers—there should be clear minimum safety requirements. Such tests should run in a properly sandboxed test environment, disconnected from other systems, and be monitored and logged. Following these fundamental best practices would have prevented or substantially mitigated all of the incidents at AI labs that we currently know about.
That said, any proposal must be flexible enough to evolve with changing technology. Minimum safety requirements specific only to current AI technologies are likely to become obsolete; legal standards tied to well-established cybersecurity best practices are far more likely to stand the test of time. Tying any new mandates to evidence-backed security protocols also protects the public without impeding future AI development.
Strong legislation should also mandate and fund independent third-party investigations into any serious security incidents that may occur during AI labs’ tests of new tools, and make reports of these investigations available to the public. This important transparency measure would go a long way toward providing public oversight of the industry.
As with any technology regulation, those targeting cybersecurity practices at AI labs must be careful, precise, and practical.


Основное содержимое страницы с новостью.

With doomsday AI scenarios dominating the news, lawmakers are rightly concerned about reports concerning security breaches at major US AI labs, such as the OpenAI–Hugging Face incident and the many others reported in its aftermath. As they consider potentially regulating frontier AI, they should focus any new legislation on the immediate, demonstrated risks from those incidents. 

Post-incident reports show that the Hugging Face incident could have been mitigated or prevented by following longstanding cybersecurity best practices, like stronger sandboxing and monitoring. Any new legislation should focus on closing gaps in existing law to prevent AI companies from taking unreasonable risks with the public's security.

DONATE TO EFF 

ensure ai serves people, not power

When an AI developer or deployer runs a test or a task that has a high likelihood of causing harm to third parties—for instance, by breaking into someone else's computers—there should be clear minimum safety requirements. Such tests should run in a properly sandboxed test environment, disconnected from other systems, and be monitored and logged. Following these fundamental best practices would have prevented or substantially mitigated all of the incidents at AI labs that we currently know about.

That said, any proposal must be flexible enough to evolve with changing technology. Minimum safety requirements specific only to current AI technologies are likely to become obsolete; legal standards tied to well-established cybersecurity best practices are far more likely to stand the test of time. Tying any new mandates to evidence-backed security protocols also protects the public without impeding future AI development.

Strong legislation should also mandate and fund independent third-party investigations into any serious security incidents that may occur during AI labs’ tests of new tools, and make reports of these investigations available to the public. This important transparency measure would go a long way toward providing public oversight of the industry.

As with any technology regulation, those targeting cybersecurity practices at AI labs must be careful, precise, and practical.

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1EFF Statement on California Governor's Executive Order on AI010.1918-09-2026
2Secure Messaging and AI Remain In Conflict Despite the Promise of TEEs06.5418-09-2026
3OpenAI dejó vía libre a su IA para hackear a gobiernos y universidades durante meses06.1824-09-2026
4LASST sues OpenAI over rogue AI cyberattacks against Hugging Face016.4530-09-2026
5A timeline of developments in AI safety since the attack on Hugging Face011.530-09-2026
6AI giants probing tens of thousands of security incidents – Axios09.8327-09-2026
7'Idiocracy' is here as Trump falls for a dangerous trap07.6221-09-2026
8AI industry insiders voice alarms to NYC council as local governments take up safety concerns06.3805-10-2026
9AI Agents Slip the Leash: How Frontier Labs Lost Control of Their Own Creations08.5902-10-2026
10Doxxing Safety Part II: Incident Response07.5431-08-2026

Классификация: Наука. Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 7.06. Источник: www.eff.org.