securitylab_nJuly 17, 2026🇷🇺Translated from Russian

Scientists Introduce Centered Daydreaming Algorithm to Eliminate Hallucinations in Hopfield Networks by Mimicking Sleep and Memory Consolidation

Researchers have transferred the human brain’s daytime encoding and nighttime memory consolidation process into Hopfield networks, one of the earliest mathematical models of associative memory, successfully eliminating hallucinations caused by false attractors.

During the day the brain records new information; during sleep it reviews accumulated memories, reinforcing useful patterns and weakening irrelevant ones. Scientists replicated this mechanism in Hopfield networks first introduced in 1982, where interconnected artificial neurons store complete patterns that can later be reconstructed from partial or noisy inputs.

The classic model, however, suffers from severe capacity limits—roughly 13 memories per 100 neurons—because the remaining space is occupied by false attractors. These spurious states mix features from multiple learned patterns, causing the network to reconstruct nonexistent combinations that resemble AI hallucinations.

Earlier “dreaming” algorithms attempted to clean the network after training by letting it wander through random states and weakening connections leading to false attractors. Prolonged cleanup, though, triggered catastrophic forgetting, erasing correct memories along with erroneous ones.

In 2025 the team introduced the Daydreaming algorithm, which merges learning and cleanup into a single continuous process. The network simultaneously strengthens valid states and suppresses false attractors during the encoding phase itself, raising capacity close to the theoretical maximum of one memory per neuron.

The original Daydreaming method worked well only with balanced datasets where black and white pixels appeared in roughly equal proportions. Real photographs frequently violate this assumption: heavily overexposed images contain mostly white pixels, while nighttime shots are dominated by black pixels, making distinct objects appear artificially similar.

To solve the imbalance problem, researchers developed Centered Daydreaming. Instead of comparing absolute pixel values, the algorithm measures each pixel’s deviation from the dataset mean. For face recognition, the system first computes an average face and then focuses exclusively on the distinctive features that differentiate individual images from this baseline.

This local, mean-centered approach preserves biologically plausible operation: each artificial neuron updates its connections using only information available from its limited neighborhood, without requiring global knowledge of the entire network state.

Experiments confirmed that Centered Daydreaming maintains high reconstruction accuracy even under extreme data skew, whereas the previous version suffered significant degradation. Although Hopfield networks are far simpler than modern large language models, their transparent structure allows researchers to trace exactly how false memories emerge and how targeted connection adjustments can remove them.

The study demonstrates that important distinctions can be separated from dominant background statistics without centralized control, potentially informing the design of more reliable, efficient, and interpretable AI architectures in the future.

Related articles

BoletimSecAI Security

AgentForger Vulnerability in ChatGPT Workspace Agents Enabled Malicious AI Deployment via Single Phishing Link

A vulnerability in ChatGPT Workspace Agents allowed attackers to create and deploy a malicious AI agent inside an organization from a single phishing link. Named AgentForger, the flaw was fixed by OpenAI on June 8, 2026. The attack exploited a permissive parameter in the Agent Builder that accepted instructions directly through the URL. An authenticated user opening the prepared link would trigger automatic execution of the command without additional confirmation. The victim required access to Workspace Agents and at least one pre-authorized enterprise connector such as Outlook, Gmail, Google Drive, Slack, Teams, or Google Calendar. The malicious prompt instructed the platform to create an agent, connect available applications, disable approval requests, publish the component, and schedule it for recurring operation. In the demonstration, the agent monitored emails from the attacker with subjects starting with “TASK” and executed the contained instructions while returning results to the attacker-controlled address.

安全客AI Security

AI Coding Tools Under Fire: Grok Build Uploads Entire Git Histories, Claude Code Suspected of Silent Transfers

Security researcher cereblab uncovered that Grok Build 0.2.93 establishes separate HTTPS channels to exfiltrate full Git repositories, resulting in a 27800-fold traffic discrepancy between task context and storage uploads to Google Cloud Storage buckets. The tool ignores user instructions such as "do not read" and decouples the improve_model_enabled client switch from the server-controlled trace_upload_enabled flag, allowing continued uploads even when privacy settings are disabled. Similar concerns emerged around Claude Code, which maintains undisclosed WebSocket connections that transmit file paths, dependency trees, and code metadata without user awareness or audit logs. Comparative traffic audits showed that Codex and Gemini produced no anomalous outbound activity, while Grok Build and Claude Code were the only tools confirmed to perform data transfers beyond user authorization. The incidents highlight systemic issues including server-side remote control of client behavior, lack of third-party audits for closed-source binaries, and the conflict between model training data needs and user data sovereignty. Experts recommend zero-trust measures such as network blocking, Docker sandboxing without mounting .git directories, git filter-repo sanitization, and preference for auditable open-source alternatives like Continue.dev or locally deployed Ollama models.

安全客AI Security

PentesterFlow Launches Open-Source AI CLI Tool for Penetration Testers and Bug Bounty Hunters

PentesterFlow is a new open-source, human-in-the-loop AI command-line tool designed specifically for penetration testers and bug bounty hunters. It automates the full workflow from reconnaissance to report generation while requiring explicit analyst approval before executing sensitive commands. The tool addresses common issues in agentic AI security tools such as hallucinations, weak context retention, and poor tool integration by incorporating built-in pentesting skills and evidence-based vulnerability confirmation. It supports connections to local or hosted LLMs including Ollama, Gemini, Groq, and others, and features continuous local learning that stores user preferences and lessons without retraining models. A key differentiator is its integration with Burp Suite and a permission-based execution model that includes a YOLO mode for isolated environments. The project positions itself as a transparent alternative to fully autonomous tools like PentAGI and PentestGPT.

SecuritylabAI Security

Optimizing Cybersecurity Content for LLMs: How Sites Can Enter Generative AI Answers

Search engines and AI services like ChatGPT, Gemini, Perplexity, Copilot and Google AI Overviews increasingly deliver synthesized answers instead of link lists. For cybersecurity publishers this changes competition because high traditional rankings no longer guarantee visibility or accurate citation. The article explains GEO, AEO and LLMO practices, shows how material moves through indexing, fragment selection and summarization stages, and stresses the need for self-contained facts that survive extraction and paraphrasing. It provides concrete writing frameworks for vulnerability reports, including required fields such as CVE identifiers, affected versions, attack conditions and real-world exploitation evidence. Technical requirements cover correct robots.txt handling for Googlebot, OAI-SearchBot, GPTBot and Bingbot plus the use of IndexNow for rapid updates. The piece also warns about poisoning risks, prompt injection and slopsquatting attacks that can feed false data into generative systems.