TECH

AI and religion: who defines the ethical values ​​of these models?

The relationship between AI and religion has taken on a new dimension as companies like Anthropic, OpenAI, and Microsoft seek input from various religious and philosophical traditions to guide the behavior of their models. This initiative aims to address a problem that engineering alone cannot solve: how should an artificial intelligence system act when faced with moral questions on which even human beings cannot agree?

An investigation by the Associated Press, published on October 25, 2026, examines this approach and identifies the risks of distilling complex religious traditions into principles applicable to computer systems. The challenge lies not only in finding common values ​​but also in ensuring that the attempt to reconcile them does not erase cultural differences or concentrate moral decision-making within a small number of technology companies.

Anthropic is one of the most well-documented examples of this approach. In May 2026, the company revealed that it had consulted with academics, religious leaders, philosophers, and ethicists from more than 15 religious and intercultural groups.

According to an explanation published by Anthropic, the goal is not to align its AI, Claude, with any specific religion. Instead, the company seeks to understand how various religious, philosophical, humanist, and political traditions approach questions concerning character, responsibility, and moral behavior.

This initiative stems from the recognition that artificial intelligence models interact with people whose values ​​and cultural frames of reference may differ profoundly. A response deemed appropriate in one society might conflict with the principles held by another community.

OpenAI has also held meetings with religious representatives, while Microsoft has promoted dialogue initiatives with such communities. Representatives from Google, Meta, and Amazon have likewise met with the Vatican to discuss issues related to technology and its impact on society.

However, these initiatives are not necessarily equivalent. Participating in a debate about ethics and religion does not mean that a company has incorporated the input gathered into its models.

The "Claude Constitution" and the gap between principles and outcomes—this discussion takes on a particularly relevant technical dimension in the case of Anthropic.

The company uses a document called the "Claude Constitution," which establishes the principles and behaviors it aims to instill in its assistant. The revised version, published in January 2026, addresses issues such as safety, honesty, accountability, and respect for human autonomy.

This document did not emerge from the religious consultations announced in May. Anthropic had already collected external input during its drafting process. The subsequent meetings are part of a broader program that may contribute to the evolution of the existing guidelines.

The company also experimented with a mechanism that allows the model to consult its own ethical commitments while performing tasks. In internal evaluations, it observed a reduction in misaligned behaviors when Claude had access to these reminders.

However, these results have a limitation. Anthropic itself acknowledges that it has not yet been able to determine how much of the improvement stems from the content of the reminders, and how much might be attributed to the mere act of interrupting the task—which prompts the model to reconsider its actions.

This distinction is crucial. The experiments do not demonstrate that religious contributions have led to direct improvements in Claude’s safety or behavior.

The definition of principles for AI models is also being discussed at other companies. In September 2026, Microsoft presented a draft code of conduct designed to keep AI under human control, featuring rules regarding corrections, oversight, and system deactivation. The document was submitted for public consultation and was not yet being used in model training at the time of its presentation. The company anticipates that a revised version will guide the future development of its AI systems.

Both approaches illustrate the gap that can exist between the definition of values ​​and their technical implementation. Publishing guidelines provides insight into a company’s intentions, but it does not guarantee that its models will adhere to these principles in every circumstance.

In the case of Anthropic, it remains to be clarified how recommendations from religious experts might be integrated into future versions of Claude, and what criteria will be used to evaluate their effectiveness.

AI and religion: the risk of homogenizing diverse traditions... The intersection of AI and religion raises concerns among researchers who study cultural diversity and the nature of religious traditions.

Webb Keane, an anthropologist at the University of Michigan, challenges the notion that religions can be reduced to sets of moral rules independent of the practices of their followers.

In an Associated Press article, Keane explains that this interpretation tends to favor traditions rooted in normative texts—specifically, the Abrahamic religions.

Other traditions place greater emphasis on communal practice, rituals, oral transmission, and the relationships among their members. Reducing these to abstract principles may strip away elements essential to understanding their true significance.

Paolo Carozza, a law professor at the University of Notre Dame and a member of Meta’s Oversight Board, identifies another issue. Combining teachings from various traditions could result in a homogenized morality, one that loses the distinct characteristics that define each culture.

In Carozza’s view, religious traditions evolve through historical and social processes, allowing them to incorporate external influences without necessarily losing their identity. An AI system that indiscriminately blends elements from different traditions may fail to preserve these distinctions.

This concern is particularly relevant when developing models intended for global use. Cultural diversity is not merely a matter of different answers to the same question; in many cases, the questions themselves, as well as the priorities and modes of moral reasoning, vary from one community to another.

Philosopher Meghan Sullivan, director of the Institute for Ethics and the Common Good at the University of Notre Dame, offers a more favorable perspective on the initiative by Anthropic. After participating in one of the meetings organized by the company, she highlighted the depth of the discussions and the genuine interest shown by the researchers involved.

According to Sullivan, the debates covered a wide range of topics—from the nature of human consciousness to the use of AI assistants in early childhood education. The philosopher’s involvement in this field extends beyond meetings with technology companies. In October 2026, Notre Dame announced her appointment as a consultant to a working group of the United States Conference of Catholic Bishops, dedicated to preserving human dignity in the age of artificial intelligence.

The participation of diverse communities can, therefore, broaden the knowledge available for the development of these models. The problem arises when this diversity must be translated into concrete decisions regarding a system’s behavior.

Who controls the values ​​embedded in artificial intelligence? The central question is not whether artificial intelligence should have safety rules; models clearly require mechanisms to reduce the risk of being used for fraud, cyberattacks, privacy violations, and other harmful activities.

The challenge lies in distinguishing these safeguards from broader decisions concerning moral, cultural, and social values.

When an AI assistant refuses a request, offers recommendations on personal matters, or sets boundaries for certain types of content, its behavior reflects choices made during its development.

These decisions may stem from the data used for training, the alignment methods employed, or the guidelines established by those responsible for the system.

In situations involving conflicting values, applying a single, uniform guideline can prove problematic. The balance between individual freedom and collective responsibility, for instance, is not interpreted the same way across all societies.

Consulting with philosophers, academics, and religious representatives can help identify these differences. However, it does not automatically resolve the question of who holds the authority to decide which principles should prevail.

There is also an issue of transparency. Although some companies release documents outlining the expected behavior of their models, it is not always possible to establish a clear link between external consultations, development decisions, and the outcomes observed by users.

Publishing ethical principles serves as a form of accountability, but it is no substitute for independent assessments of how those principles actually influence the behavior of the systems.

Technological safety should not imply moral standardization. While attempting to identify shared values ​​across different traditions can help develop models that are more sensitive to the cultural contexts in which they are used, it also carries the risk of collapsing complex principles into a uniform moral framework.

This risk does not necessarily mean that companies are deliberately seeking to impose a specific worldview. Rather, it means that the choices made during the development of these models may prioritize certain perspectives over others—even when the stated goal is to promote diversity.

There is a clear distinction between preventing a system from facilitating harmful activities and dictating the "morally correct" response to social issues on which legitimate, divergent viewpoints exist.

The former responsibility is directly linked to technological safety. The latter requires a broader discussion concerning pluralism, transparency, and public participation.

Engagement between AI companies and religious communities can contribute to this debate, but it should not be mistaken for the discovery of universal moral principles. The lingering question is to what extent users and affected communities will be able to understand, evaluate, and challenge the values ​​embedded in the systems they use.

If such decisions remain concentrated within the companies responsible for these models, artificial intelligence may end up reproducing a narrow view of human diversity—even if it was developed with input from various traditions.

Artificial intelligence and religion intersect through practical use, ethical alignment, and emerging spiritual behaviors.

Practical uses in faith communities:

• Administrative relief: Religious organizations and clergy use AI to draft newsletters, write community bulletins, summarize long documents, and translate announcements.

• Bespoke chatbots: Specialized faith-based tools—such as Magisterium AI, Ansari, and Ephrem—provide 24/7 pastoral guidance, study assistance, and religious text interpretation.

Ethical alignment and tech collaboration:

• Faith-AI roundtables: Tech companies like Anthropic, OpenAI, Meta, and Google have engaged with religious leaders (including representatives from Christian, Hindu, Jewish, Baha'i, Sikh, and Mormon traditions) to build better moral guardrails into large language models.

• Secular bias concerns: Studies from institutions like Brigham Young University and The Economist note that frontier AI models often display a strong secular bias, underrepresent spiritual contexts in personal dilemmas, or lean toward Western or homogenized viewpoints.

Synthetic spirituality and "artificial religion":

• Authoritative attribution: Because AI generates responses that feel personalized, real-time, and all-encompassing, users increasingly treat algorithmic output with a level of reverence or authority akin to religious practice—a concept scholars describe as "Artificial Religion" or "synthetic spirituality".

• Agentic belief systems: In experimental settings, autonomous AI agent networks have occasionally generated shared stories, symbols, or localized digital culture among themselves without human programming

mundophone

 

TECH

AI agents accelerate cyberattacks and shrink the time companies have to react

The use of artificial intelligence by criminals is accelerating digital attacks and increasing the pressure on teams tasked with protecting companies and online services.

According to a report by The Wall Street Journal, tools capable of automating stages of an intrusion are being used both by sophisticated groups and by attackers with little technical experience.

This shift involves so-called "AI agents"—programs that can execute sequences of tasks and determine subsequent steps based on the results they encounter. During an attack, these agents can help map out systems, identify vulnerabilities, and attempt to gain access to information.

A report from CrowdStrike, published this week, details four operations in which attackers employed AI agents to select actions and carry out stages of an attack, with varying degrees of human oversight.

Continuous security operations for faster defense...To address this new threat landscape, organizations are transitioning to continuous security operations models.

In these environments, detection, correlation, and response no longer function as separate activities but instead become part of an ongoing workflow.

The goal is not simply to automate more tasks, but to expand the operational capacity of security teams so they can keep pace with fast-moving threats.

In this model, AI acts as an extension of the security team. Context is built continuously, investigations progress in the background, and much of the initial analysis is already available before a security analyst gets involved.

This approach is especially valuable for MSPs, whose ability to scale operations depends on simultaneously managing a growing number of clients without a proportional increase in staffing.

Organizations are pivoting toward AI-driven continuous security operations models. Context building, activity correlation, and elements of the investigative process no longer depend solely on sporadic human intervention, but instead operate continuously.

The goal is not simply to automate more tasks, but to expand the operational capacity of security teams so they can respond more quickly and consistently in a fast-paced threat landscape. Reducing the time spent on repetitive investigation and contextualization tasks means security teams can focus their expertise on decision-making, oversight, and strategic response.

Time has become the new perimeter...AI is redefining the balance between attack and defense. As attackers leverage autonomous capabilities to accelerate intrusions, defenders need new ways to expand their operational capacity and respond at the same speed.

Consequently, security operations must evolve toward continuous operating models where AI is not merely an efficiency tool, but an active component of an organization's defensive capability.

Because in the era of autonomous AI, time is no longer just an operational metric. It has become the most critical asset in modern cybersecurity.

If you'd like to explore this transformation further, read our article "Security Operations Enter the Age of Native AI", where we examine how artificial intelligence is reshaping cybersecurity’s operational capacity and why time is now the deciding factor in modern cyber defense.

In our next article, we will also explore why operational capacity is emerging as one of the biggest challenges in modern cybersecurity, and how it is changing the way organizations scale their security operations.

Attacks on the healthcare sector in Argentina: An operator compromised at least 15 organizations. In one instance, credentials and medical information were stolen. The system utilized one "supervisor" agent to select tasks, while another agent executed them.

Targets in Brazil and other countries: An operator compromised government entities in two countries and targeted companies in Brazil and the United States. Their systems allowed the AI ​​to operate autonomously or distribute tasks among specialized agents. The report does not state whether the attempts against Brazilian companies were successful.

An attacker with limited technical experience: An operator used a set of instructions to guide "Claude Code" during intrusions. Although the operator had to intervene to bypass the model’s built-in security barriers and persist with the attempts, they ultimately succeeded in compromising government domains and private companies.

Theft of corporate data: A Russian-speaking group stole customer data from a U.S.-based provider of customer relationship management (CRM) software and compromised several other organizations. The agents were provided with a seven-step roadmap, yet they retained significant autonomy in choosing their methods for carrying out the intrusion. In another study, Microsoft identified attacks involving ARTEX, an open-source tool designed for security testing and vulnerability discovery. According to the company, the group known as Storm-0940 used this tool to automate attacks against hundreds of organizations across various sectors. In some instances, the attackers gained access to restricted functions within the victims' cloud systems in less than three hours.

This does not mean every attempt was successful. Microsoft states that most of the observed actions failed, though the group did manage to maintain unauthorized access to several organizations. The challenge, the company notes, is that the speed of automation leaves security teams with very little time to analyze alerts and block the intruders.

The pressure intensified this week with the disclosure of critical flaws in PHP—a technology that powers many websites. These vulnerabilities could allow an attacker to execute commands remotely on affected servers without needing to log in. Emergency patches were released on October 21.

Amazon reported that its monitoring systems detected an attempt to exploit these flaws on October 17, four days before they were publicly disclosed. Following the release of the patches, new exploit code appeared within hours and was almost immediately deployed against the company’s sensors. Amazon points out that it remains unclear whether all these attempts would have been effective against actual, live systems.

While AI can assist in identifying security issues, it can also facilitate the work of those seeking to exploit them. According to Amazon, using such technology to analyze security updates makes it faster and cheaper to figure out how to attack systems that have not yet been patched. This shrinks the window of time companies have to respond, requiring that critical vulnerabilities in internet-facing services be addressed within hours.

AI agents accelerate cyberattacks by automating vulnerability discovery in real time, shrinking the time companies have to react by executing exploits at machine speed—effectively removing the human factor from the process.

While traditional attacks rely on human operators to analyze networks manually and in stages, AI agents operate autonomously and continuously. This transforms the window for defense—previously measured in days or weeks—into a matter of minutes or seconds.

Below are the primary reasons why AI agents have revolutionized the speed and scale of cyber threats:

How AI agents accelerate attacks:

• Autonomous Scanning and Reconnaissance: AI agents scour the internet and corporate networks around the clock. They identify security gaps and misconfigurations instantly, without requiring human input at every step.

• Tailored Exploit Development: Using advanced language models (LLMs), these agents can analyze the code of a target system and generate malicious code specifically designed to exploit a particular vulnerability in real time.

• Hyper-personalized Phishing at Scale: AI eliminates common grammatical errors and creates highly convincing emails, messages, and voice clones (deepfakes). A single agent can interact with thousands of employees simultaneously, dynamically adapting the tone of the conversation.

• Adaptive Evasion: If an AI agent encounters antivirus software or an endpoint detection and response (EDR) system, it does not give up. Instead, it modifies its own code or behavior in real time to bypass the security barrier and continue the intrusion.

Why the time available for corporate response has shrunk:

• Machine Speed ​​vs. Human Speed: Human defenders must analyze alerts, validate whether a threat is genuine, escalate the issue, and make a decision. AI agents make decisions and spread malware across a network in milliseconds.

• Immediate Exploitation of Vulnerabilities (Zero-Day): As soon as a new vulnerability becomes public, AI agents can create and launch attacks globally—even before a company’s IT team has the chance to apply a security patch.

• Coordinated Mass Attacks (Orchestration): A single cybercriminal can deploy multiple AI agents to attack different parts of an organization simultaneously. Security teams become overwhelmed by hundreds of concurrent alerts, which paralyzes their ability to perform human-led triage.

A paradigm shift in defense... Given this landscape, traditional approaches—relying on signatures and human reaction—have become obsolete. To survive attacks driven by AI agents, companies are being forced to adopt defense systems that also utilize AI agents, capable of isolating networks, blocking traffic, and mitigating threats in a fully automated and autonomous manner.

mundophone

 

DIGITAL LIFE

iPhone spyware can infect devices without a single click

An investigation by cybersecurity firms iVerify and Report URI has revealed that iPhone spyware can be distributed through legitimate advertisements and websites—without the victim needing to click a link, install an app, or open a file. These attacks exploit vulnerabilities in older versions of iOS, allowing for the theft of passwords, personal data, and information from cryptocurrency wallets.

The investigation, released on October 21, 2026, and reported by Axios the following day, identified an infrastructure that leverages advertising and traffic-analysis services used by thousands of websites. Researchers estimate that the operation spans pages receiving approximately 135 million monthly visits, though this figure does not equate to the number of infected devices.

Zero-click hacks are a holy grail for attackers and catastrophic for victims, because they can automatically install malware on devices without requiring any interaction or missteps from the target. When sophisticated hackers have deployed rare zero-click attacks in recent years, they have often exploited vulnerabilities in mobile messaging and communication apps to infect victims. But attackers have also exploited the sprawling infrastructure of the online ad ecosystem to distribute malware, sometimes with little or no interaction needed from victims. Evidence of the zero-click spyware campaign that Citizen Lab’s researchers uncovered shows the two threats merging, underscoring the extent and urgency of the risk.

“AdFection allows operators to automatically hack specific individuals with mercenary spyware as they use apps or browse the internet,” says Bill Marczak, a senior researcher at Citizen Lab. “Someone who gets hacked like this would not see anything amiss. In fact, they might not even see any ad at all.”

The situation is so concerning, he notes, because there isn’t much that people can do to protect themselves from zero-click ad attacks other than blocking ads as thoroughly as possible on all websites and platforms—a fact that intelligence agencies like the NSA and CIA seem to know all too well.

“The risk of having your device infected with spyware simply by using a website or app that displays ads is a nightmare scenario,” says Wolfie Christl, a senior Citizen Lab researcher.

During 2024 and 2025, Citizen Lab concluded that 45 devices belonging to the news outlet Al Jazeera were targeted with zero-click attacks delivered by ads. The researchers say that the targeted ads were issued by the Israeli-founded marketing firm Discover-Tech and distributed spyware attributed to the Israeli developer Candiru. Infected devices had contact with domains linked to Discover-Tech and then connected to infrastructure associated with Candiru, according to Citizen Lab’s analysis. (Al Jazeera, which participated in the investigation and shared device logs with Citizen Lab researchers, did not respond to a request for comment.)

“The ability to push individualized, arbitrary content at specific users is a hallmark of the modern online ads ecosystem, and is perfectly suited to the mercenary spyware industry,” Marczak says. “Until this architecture changes, or ad companies get serious about customer vetting, we’re going to keep seeing this kind of abuse.”

Emails and messages sent to Discover-Tech and its CEO by WIRED did not receive a response before publication. Integrity Partners, which is believed to own Candiru’s assets, following sanctions by the US government in 2021, also did not respond to requests for comment.

Google, which operates one of the world’s largest advertising businesses, terminated Discover-Tech’s registration after collaborating with Citizen Lab and researchers from the cybersecurity firm Confiant and confirming a spyware link. “Following a joint investigation with Citizen Lab and Confiant, Google blocked Discover-Tech from our ad platforms for systematically violating our policies,” a Google spokesperson says. “We also set up Safe Browsing warnings to help protect people if they navigate to websites linked to this group.”

How iPhone spyware arrives via legitimate websites...The core of the investigation centers on an operation dubbed "DeadTag." According to an analysis published by Report URI, cybercriminals are acquiring expired domains that remain linked to legacy advertising and traffic-analysis tools.

Many websites retain references to these services long after they have stopped using them. Once a domain expires and is purchased by a third party, the new owners gain control over the code that those websites continue to load automatically.

It is precisely this reliance on external resources that the DeadTag operation exploits. By taking control of abandoned domains, attackers are able to distribute malicious content through pages that users perceive as legitimate.

In the identified cases, the system distinguishes visitors using iPhones and determines whether their devices contain known vulnerabilities. When it encounters a susceptible device, it can load tools capable of exploiting browser flaws to install spyware.

The investigation identified two such tools, known as "Coruna" and "DarkSword." Both exploit iOS vulnerabilities, though they target different versions of the operating system.

Coruna: targets vulnerable versions from iOS 13 through iOS 17.2.1.

DarkSword: targets vulnerable versions from iOS 18.4 through iOS 18.7.

These ranges correspond to the versions targeted by the analyzed variants; they do not imply that every device running these versions is necessarily vulnerable. Security updates already released by Apple are crucial for protection.

Exploiting vulnerabilities in browsers and internal operating system components is not a new phenomenon. In May, TecheNet reported that over 50 vulnerabilities had been patched in iOS 17.5—including flaws in WebKit and the kernel.

Attacks have also been identified on Instagram...The research was not limited to websites using expired domains. iVerify also uncovered a campaign that distributed a variant of DarkSword via a malicious advertisement on Instagram, themed around the FIFA World Cup.

According to iVerify’s investigation, the ad infected the iPhone of an employee at a client organization while they were browsing content on the social media platform. No click on the advertisement was required.

The same user was later targeted by another attack, this time involving a malicious connection and a different variant of DarkSword. The organization’s security team received alerts and was able to change the compromised credentials before they could be used to access the corporate network.

Investigators also discovered code linked to DarkSword on hundreds of online stores that used the PrestaShop e-commerce platform. The malicious software was hidden in directories with names designed to mimic traffic analysis tools.

The combination of these techniques demonstrates that cybercriminals no longer rely solely on fraudulent messages or fake applications to compromise mobile devices. It is enough for a vulnerable iPhone to load certain malicious content via a web browser or an application.

What attackers seek to steal...The analyzed variants of Coruna and DarkSword aim to obtain information stored on the devices—specifically, passwords saved in the iPhone’s credential management system, account data, and information related to cryptocurrency wallets.

Targeted applications include Coinbase Wallet, Binance, Trust Wallet, OKX, Bitget, and Exodus, among others.

Researchers also identified capabilities for collecting contacts, messages, and location data. This information could enable other forms of fraud or facilitate subsequent attacks against personal and business accounts.

The analysis points to primarily financial motivations. However, the identities of those responsible for the "DeadTag" operation remain undetermined. There are indications linking the operators of certain exploitation campaigns to Chinese-speaking individuals, though this does not confirm their nationality or establish a connection to any government.

How to protect your iPhone from these attacks: Although these tools have the capacity to compromise devices without direct user interaction, researchers emphasize that the attacks rely on specific vulnerabilities. An iPhone with the appropriate security patches does not necessarily face the same level of risk as a device running outdated software.

Apple has previously acknowledged the existence of attacks involving malicious content on the internet. In a security advisory published in April 2026, the company explained that it had investigated these vulnerabilities and released updates to prevent them from being exploited.

According to the manufacturer, devices running updated versions of iOS were protected against the attacks identified at that time. The company even provided patches for older models that no longer support the latest versions of the operating system.

Apple also offers specific mechanisms for users targeted by sophisticated espionage operations. In August, TecheNet reported on a new wave of alerts from Apple regarding "mercenary spyware," highlighting the importance of "Lockdown Mode" for individuals at heightened risk.

To reduce risk, users should take the following precautions:

Update iOS: Install available security updates by going to Settings > General > Software Update.

Keep apps updated: Use the latest versions of your applications and compatible web browsers.

Consider using "Lockdown Mode": This Apple feature is designed primarily for individuals who are at a higher risk of being targeted by sophisticated cyberattacks.

Check for signs of compromise: If there are concrete indications of an infection, seek a technical assessment and change any potentially exposed credentials using a secure device. The investigation also offers recommendations for website operators. These include removing code associated with services that are no longer in use, monitoring external resources loaded by web pages, and implementing security policies that limit the execution of third-party code.

The potential reach of the "DeadTag" operation warrants attention, but the figures must be interpreted with care. The 135 million monthly visits represent traffic to the websites identified within the analyzed infrastructure—not the number of iPhones that were actually attacked or infected.

The investigation’s primary conclusion is that espionage tools—previously linked to operations targeting specific individuals—are now being employed in broader criminal campaigns. In this context, keeping iOS updated remains one of the most critical measures for protecting personal data, even when browsing websites that appear entirely legitimate.

Zero-click spyware can infect iPhones and other Apple devices automatically without requiring the user to click a link, open a file, or take any action.

How zero-click attacks work:

• No user interaction: Unlike traditional malware that relies on a phishing link, zero-click exploits take advantage of hidden flaws in automatic data processing services.

• Common sectors: Attackers have historically exploited vulnerabilities through messaging apps like iMessage (using malicious attachments, PDFs, or PassKit images) and web-based traffic.

• Targeted Ads ("AdFection"): Recent research by the Citizen Lab revealed campaigns where real-time online advertising auctions were weaponized to inject spyware just by loading a website or opening an app.

• Mercenary software: State-sponsored groups and commercial spyware vendors (such as NSO Group with Pegasus) use these methods to compromise high-value targets like journalists, activists, and politicians, though cybercriminals have increasingly adapted similar exploit kits for broader financial theft.

How to protect your device:

• Update iOS promptly: Install the latest software updates immediately, as Apple frequently patches active zero-day vulnerabilities.

• Enable lockdown mode: Turn on Lockdown Mode in your device settings if you believe you are at high risk of being targeted by mercenary spyware.

• Review official guidance: Check Apple’s Support Page on Mercenary Spyware for step-by-step hardening recommendations

mundophone

 

TECH

New HP printers arrive with post-quantum security

HP has unveiled two new ranges of HP LaserJet printers in Portugal, featuring security mechanisms designed to withstand future threats from quantum computing. The LaserJet Pro 4000/4100 and Color LaserJet Enterprise 4000/X400 series are aimed at small and medium-sized enterprises (SMEs), work teams, and organizations that need to manage documents and networked printing equipment.

The presentation in Portugal, held on October 22, showcased devices for both monochrome and color printing. The LaserJet Pro 4000/4100 series had previously been announced internationally in March 2026. The latest announcement focuses on bringing these product lines to the Portuguese market and integrating post-quantum protection mechanisms across various segments of business printing.

One of the key highlights of this new generation is the introduction of security features resistant to quantum-based attacks—a timely development, given that the evolution of quantum computing has raised concerns regarding the robustness of current encryption systems.

For the SME segment, the LaserJet Pro 4000/4100 series stands out as the first printer line on the market to offer this level of protection, incorporating additional safeguards across firmware, chips, and consumables to prevent tampering. Meanwhile, the Enterprise 5000/6000 range integrates with the HP Wolf Enterprise Security ecosystem and includes advanced protection features, designed to reduce exposure to cyberattacks within more complex corporate environments.

HP emphasizes gains in productivity, driven by high-speed printing and scanning capabilities. The Enterprise series supports double-sided scanning at up to 200 images per minute and printing at up to 57 pages per minute, while the Pro range offers automatic duplex printing with best-in-class performance. In terms of operational costs, TerraJet toner technology reduces ongoing printing expenses by up to 25% compared to the previous generation, while also improving energy efficiency and lowering material consumption.

The integration of artificial intelligence plays a central role in this new lineup. Tools such as HP Scan AI automate optical character recognition (OCR), convert documents into editable files, and reduce manual processing time by up to 50%. Other features include the automatic detection and removal of sensitive information—aiding in regulatory compliance—as well as integration with Microsoft 365 Copilot, which enables tasks like summarizing, organizing, and translating documents directly on the devices themselves.

The company notes that the evolution of the modern workplace—characterized by hybrid work models, the adoption of AI, and a more dispersed array of devices—is increasing the complexity of managing print infrastructure. Data presented by HP indicates that 78% of SMEs face challenges in managing hardware and consumables, while 80% plan to invest in print management software. Meanwhile, 70% of organizations anticipate reallocating IT budgets toward AI by 2027.

The new series carry environmental certifications such as EPEAT Gold, ENERGY STAR, and Blue Angel, and incorporate recycled materials—with TerraJet toner containing up to 30% recycled plastic.

HP thus positions the new LaserJet generation as part of a broader strategy to modernize document infrastructure, combining automation, security, and efficiency within an environment of increasing digitalization of business processes.

The HP LaserJet Pro 4000/4100 series is designed for SMEs that require monochrome printing but have limited resources for IT management.

According to the manufacturer, this is the first line of printers in its class—geared toward SMEs—to feature protection mechanisms resistant to quantum-based attacks. This claim is based on an internal HP analysis conducted in March 2025 and specifically pertains to the protection of BIOS and firmware integrity.

The devices include Wi-Fi 6 with automatic connection reset and support for double-sided (duplex) printing. HP states that they offer the fastest duplex printing in their category, according to a study by Keypoint Intelligence commissioned by the company.

Another update concerns consumables. According to the manufacturer, TerraJet cartridges can reduce printing costs per page by up to 25% compared to the previous generation. This technology also enables, on average, an 11% increase in the number of pages printed per unit of toner used. The product line incorporates artificial intelligence features to adjust document formatting, improve print quality, and automate tasks such as file identification and sharing. Some of these tools are available only in English, and their availability depends on the specific model and market.

The second line introduced, the HP Color LaserJet Enterprise 4000/X400, is designed for work teams within companies and public sector organizations.

These devices reach speeds of 33 pages per minute (A4 format)—an increase from the 29 pages per minute of the previous generation—and offer a resolution of 1,200 × 1,200 dpi.

In the multifunction models, the 50-sheet automatic document feeder allows for double-sided scanning in a single pass. Scanning speeds can reach 80 images per minute in black and white, and 66 images per minute in color.

Scanned documents can be saved as searchable PDFs. Converting files into editable Word, PowerPoint, or Excel formats may require an additional license, depending on the model.

Regarding security, the series integrates HP Wolf Enterprise Security, featuring post-quantum cryptographic mechanisms designed to protect the integrity of the BIOS and firmware. It also includes TPM 2.0 and is compatible with centralized administration tools, such as HP Web Jetadmin.

Paper input capacity can be expanded to 1,400 sheets through the installation of optional trays.

What does post-quantum security mean for HP printers? In the future, quantum computing could potentially compromise some of the cryptographic algorithms currently used to protect computer systems and communications.

This threat has already prompted warnings from European authorities. In October, Europol identified risks to data protection and the encryption systems used in cryptocurrencies, advocating for an early transition to mechanisms that are resistant to quantum computing. In new HP printers, the announced protection focuses primarily on verifying the integrity of the BIOS and firmware. The goal is to make it more difficult to install malicious software that masquerades as a legitimate device update.

This protection does not mean that the printers are immune to cyberattacks, nor does it mean that all processed data benefits from post-quantum encryption.

Preparation for these threats has already led the National Institute of Standards and Technology (NIST) to develop post-quantum encryption standards, designed to protect digital systems against future, sufficiently advanced quantum computers.

mundophone

 

DIGITAL LIFE

AI deepfakes are getting more realistic. CU scientists developed a better way to spot them

Deepfake threats to companies...Deepfakes – synthetic media where a person’s likeness is swapped for another – are not a new concept. Photographic and film manipulation, telephone voice decoders, and image adjustment have been with us for some time. However, the rise of generative artificial intelligence (GenAI) has moved everything much further forward, making tools available at low/no cost, enabling almost anyone with a smartphone and basic understanding to create AI-generated synthetic media. In the hands of bad actors, these technologies can increasingly be used to make deepfakes for fraud, deception, and defamation.  

Chief Executive Officers (CEOs), General Counsels and the heads of Information Security, Fraud, Risk, Marketing, all have good reason to be concerned about the rapid spread of deepfake technology. In this article, KPMG professionals seek to examine some of the potential threats of deepfakes and discuss how organizations can shore up their defenses to try to reduce the risks to their business.  

The rise of deepfakes exploits our natural tendency to trust visual and auditory content, posing significant risks. It's critical for organizations to enforce robust Trusted AI programs to help ensure safe and ethical AI use and secure deployment. Implementing a zero-trust architecture is equally essential, embedding verification across all operations with stringent controls and cutting-edge technology. This strategic approach is vital for maintaining integrity and trust in the digital age."...KPMG International

Child’s play or malicious weapon? The democratization of deepfake technology...Virtually anyone can make a deepfake, enabled by the accelerating democratization of GenAI, driven by open-source tools, user-friendly platforms, and decentralized access to deepfake technology. This can make it simple and low-cost (or potentially even free) to create audio, video, and text via advanced GenAI techniques, mostly based on large language models (LLM) that consume and classify content and reproduce it in new ways. It's already possible to go online and learn how to make a convincing deepfake, based on a mere three seconds of recorded audio of someone’s voice – using off-the-shelf, publicly available software. On top of this, there is an emergence of "deepfake-as-a-service" as a lucrative market on the dark web.

Attack surfaces are increasing, in part due to the hybrid work environment where many people are connecting with organizations remotely from homes, coffee shops, airports, gyms and other locations. The use of biometric data for authentication and authorization presents further opportunities to infiltrate organizations, via synthetic voices and images. According to one recent global study, 70 percent of people say they’re not confident they can identify a real versus a cloned voice.

This gets to the essence of the deepfake threat, which is the human propensity for trust. As a visual and communicative species, people often authenticate, and trust based on what can be seen and heard. But the knowledge that deepfakes are out there could seriously erode trust and necessitate new ways to verify authenticity.

The deepfake threat spectrum...Criminals or other malicious actors can use deepfakes in a number of ways that are potentially damaging, amplifying the costs of fraud, regulatory fines, and data breaches, and eroding trust in brand integrity: 

Fraudulent financial transactions...Cybercriminals could use deepfakes to impersonate senior executives during phone calls or video conferences (sometimes called “vishing”), convincing others that they carry authority. They could then acquire confidential information or even persuade individuals to transfer significant funds. Insurance companies could be targeted with deepfake generated images submitted with claims. With more companies moving toward automated claims processes, removing the human claims adjuster, such images may not come under as much scrutiny. And customers can be targeted by deepfakes posing as official company representatives and surrender personal financial details or even make payments to criminals.

Disinformation...Deepfakes videos or audio recordings can spread fraudulent or false and defamatory information about individuals and organizations, which could damage stakeholder, customer, and wider public trust. In a social media age, such content can go viral in seconds. For instance, by circulating deepfakes of executives announcing a company’s financial status, upcoming mergers, or product launches and marketing materials – or making derogatory remarks, or inaccurate political statements – criminals could profit from subsequent fluctuations in share prices, as well harming a company’s reputation. Such tactics could also be used by competitors to cause stock price volatility and deter investors – as well as by other nation states to undermine the economy. Similarly, malicious actors may try to damage companies’ reputation by spreading deepfakes about environmental harm, poor labor practices, faulty, dangerous products, or inappropriate behavior from executives. 

Enhanced social engineering attacks...By using deepfakes, bad actors can penetrate organizations by, for example, impersonating a Chief Technology Officer (CTO) to persuade staff to grant access to a core technology system – to steal confidential information or plant malware. This might be achieved through targeted “spear phishing” emails with a deepfake video attached.

Other deepfake risks...Many companies are also vulnerable to extortion from AI fabricated incriminating content, brand misuse, potentially leading to legal liabilities, fines, loss of trust and business. Remote hiring practices could open the door for either criminals or under-qualified candidates, using deepfakes to give synthetic identities a convincing face and voice – even going so far as to conduct interviews.

Hundreds of the nation’s smartest computer scientists gathered for a conference in Denver last fall, and Tuan Tran had a big test for them:

Could they tell the difference between the real Brad Pitt and an AI-generated version of him?

Tran, a doctoral candidate in computer science at CU Boulder, rolled the tape on a large projector. Only half of the audience could spot the deepfake.

“These deepfake generating models are becoming very strong,” Tran said.

To address this, Tran and a team of researchers at CU Boulder set out last year to build their own system for spotting fakes in video. It uses far less computing power to achieve the same results as the current detection models.

Their findings were presented at SIGCOMM, a flagship conference in computer networking and systems held in August in Denver.  

Bad actors have used AI-generated deepfakes to impersonate financial officers at major companies and convince employees to wire large amounts of money. One such deepfake scam in Hong Kong resulted in someone wiring $25 million to fraudsters. 

Millions of people remain vulnerable to such trickery when they hop onto video conferencing calls. Tran said Zoom, Apple FaceTime and Google Meet lack real-time deepfake detection. Microsoft Teams does too but the company recently announced an effort to start providing it. 

The commercially-available systems designed to flag imposters require a massive amount of computing power, making them hard to scale and too expensive for most users.

Tran’s team set out to determine whether deepfake detection could be simplified enough to bring to the masses. 

“Some people thought this was impossible because of the system requirements and current architecture,” said Sangtae Ha, a computer science professor at CU Boulder who co-led the research team. “But by looking into the system from another perspective, you can actually solve the problem.”

Problem pixels...The team spent many hours in front of a whiteboard deep inside CU’s engineering center trying to crack the code and figure out a way to simplify deepfake detection. Sometimes they wouldn’t go home until 1 a.m.

They worked through fall break, Christmas and even the New Year. 

“The experience itself was very joyful, even when it was intense,” said Shirin Ebadi, a doctoral candidate in electrical and computer engineering, and a co-author. ”The most exciting part is doing something that’s never been done.”

She said existing deepfake detectors work well, but they need to see the actual picture to work. Video travels the Internet in compressed form, so before a detector can examine a face, it has to reconstruct every frame of every participant's video at full resolution. 

That takes a lot of computing power...The researchers discovered they didn’t need to reconstruct the video at all to spot deepfakes. The clues were already sitting in the compressed form of the video that travels over the network.

Imagine a video clip of a person speaking in front of a plain wall. Video compression doesn’t send every pixel of every frame. Instead, it describes the changes that occurred since the frame before. 

The wall barely changes in the video, so it’s covered by a few large blocks of pixels, while the face and its shifting expressions are carved into many smaller blocks to capture the detail. 

When someone's appearance changes abruptly, a compressor has to write down a lot of new information. The team measured how much of that new information lands on someone’s face and how widely it's spread. 

Crucially, the method reads these numbers directly from the compressed video without ever decompressing it to a higher resolution. Only when something looks suspicious does the detector ask the sender's device for a complete, fresh frame and use AI to check for a deepfake.

"We only had to look at data from one out of every hundred frames, instead of every frame," Ha said.

Scaling up...The team demonstrated that the detection system could spot deepfakes using 143 times less computing power than the existing models.  They tested it on a library of 1,000 online videos containing deepfakes, and reported near-perfect accuracy.

Eric Keller, an electrical and computer engineering professor at CU Boulder and a co-leader of the project, said the team wants to adapt the detection system so it can be scaled up and used for large-scale video conferencing.

The team is betting that as deepfakes become a bigger problem, the demand for new detection technology will only grow.

Researchers at the University of Colorado Boulder (CU Boulder) developed a lightweight deepfake detection system that analyzes compressed video data directly without needing to deconstruct or reconstruct full video frames.

How the new method works:

• No full reconstruction: Traditional detectors must decode and rebuild every frame at full resolution to examine a face, which requires massive computing power.

• Reading compression clues: The CU Boulder team realized they could read clues directly from the compressed data blocks (like MPEG or similar formats) already moving across the network.

• Tracking facial changes: Video compression uses small blocks of pixels for fast-moving or expressive areas like a face, and larger blocks for static areas like a plain wall. The system measures how much new compression data lands on a person's face and how it spreads.

• Targeted verification: Instead of checking every single frame, the system only looks at data from roughly 1 out of every 100 frames. It only requests a full, fresh frame to run deeper AI checks if something looks suspicious.

Key results and advantages:

• Lower compute load: The method uses 143 times less computing power than standard models.

• High accuracy: In tests on a library of 1,000 online videos containing deepfakes, the system achieved near-perfect accuracy.

• Scalability: Researchers aim to scale up the technology for real-time, large-scale video conferencing.

Details on the research were presented at the SIGCOMM computer networking and systems conference. You can read the university's announcement on the CU Boulder Today portal.

CU Boulder

 

FUJITSU

FMV Note U UX-L3: Fujitsu’s new 14-inch notebook weighing just 634 grams

Fujitsu has unveiled the FMV Note U UX-L3, the world's lightest 14-inch AI laptop with an 8C/8T Intel Core Ultra 7 355 CPU. The laptop offers up to 49 TOPS of AI compute power, a rugged carbon-fiber body, multiple ports, and MIL-STD 810H durability.

Fujitsu has unveiled the FMV Note U UX-L3, the lightest 14-inch laptop in the world according to the company. The laptop is rated for drop, shock, and pressure resistance to MIL-STD-810H standards due to its rugged, carbon fiber body. The laptop comes with an AI NPU and a slew of ports.

The UX-L3 weighs 634 grams (1.40 pounds) and has a rated runtime of 7.5 hours when playing videos (JEITA 3.0 testing standard) using its 31 Wh battery. Its revised charger is lighter than the prior model and now weighs in at 148 grams (0.33 pounds). The fast charger can add about 80% charge in an hour, says Fujitsu.

The laptop has been MIL-STD-810H tested against drops, vibration, shock, dust, humidity, and high and low temperatures. The durable body is designed to survive 200 kgf (441 lbf) of pressure on top of its closed lid.

The ultralight laptop comes with an 8C/8T Intel Core Ultra 7 355 CPU, with an integrated NPU providing up to 49 TOPS of AI compute power for hardware acceleration of AI services such as Microsoft Copilot in Windows, along with a fixed 16 GB of LPDDR5X-7467 RAM and 512 GB of PCIe SSD storage.

The Note U is fitted with a 14-inch 1,920 x 1,200 matte LCD display, and comes with two USB-A 3.2 Gen 1 ports, two USB-C 3.2 Gen 2x2 ports (DP Alt Mode, PD), a full-sized HDMI port, an Ethernet port, Wi-Fi 7, BT 5.4, a 3.5mm headphone jack, and a microSD card slot. 

Users can instantly log into Windows 11 using the Windows Hello fingerprint sensor or the Full HD webcam. The included AI-powered Noise Cancellation software can be trained to recognize the user's voice, then automatically filter out all other speakers as well as background noises from online video calls. Also included is Umore, an AI beautifying software that tracks users in 3D, then applies skin correction and virtual makeup.

The Fujitsu FMV Note U UX-L3 laptop has an undisclosed price that will likely be around 260,000 yen (~$1,700) when it goes on sale in Japan on November 13, 2026.

Unfortunately, readers outside Japan are faced with much heavier laptop choices. Even the smaller Surface Pro 12 tablet PC (sold here on Amazon) weighs a heavier 686 g (1.51 pounds) without a keyboard.

Fujitsu Client Computing (FCCL) has announced new models for its "FMV Note U" series of 14-inch laptops. The additions include an ultra-lightweight variant weighing approximately 634 grams, as well as a special model developed in collaboration with other companies.

The Note U series serves as the flagship for the newly unveiled FMV winter 2026 lineup, which encompasses five series and eleven models, with a phased rollout beginning on October 23. The company is also expanding its range of Copilot+ PCs.

According to FCCL, as of September 1, 2026, the ultra-light weight of approximately 634 grams applies to the "FMV UX-L3," "FMV WU6-L3," and "FMV WU5-L3" models. This makes the series the lightest 14-inch device in its category globally. Despite their lightweight design, the Note U devices meet the requirements of the MIL-STD-810H military standard.

Compared to the previous model, battery life during video playback—measured according to the JEITA 3.0 standard—has improved from 7.0 to 7.5 hours, representing a 107% increase. The U59-L3 model also features a battery that can be replaced without the use of tools.

Regarding processors, several platforms with integrated NPUs for Copilot+ functions are available. FCCL offers configurations featuring the Intel Core Ultra 7 355 (UX-L3)—with an option for the top-tier Core Ultra 9—as well as versions equipped with the AMD Ryzen AI 7 445 (U77-L3) and Ryzen AI 5 430 (U59-L3, U55-L3). In addition, the company offers a variant called the UQ-L3, featuring the Snapdragon X X1-26-100 processor. The hardware is complemented by updated software: FMV’s proprietary application, "Quick Capture," now includes text recognition and search functionality for screen recordings, while the "Reclip" program supports NPU processing.

All portable PC models are manufactured in Japan and come with a power adapter that weighs approximately 148 grams and features a flip-up plug. Concurrently, the company has launched its own accessories brand, "FMV Accessory."

Mobile connectivity options and shifting user behavior...The "FMV WU7-L3" model ensures continuous connectivity via KDDI’s "ConnectIN povo" service. Weighing approximately 870 grams and equipped with a 3-cell battery, the device integrates a 5G and 4G LTE module with a permanently installed eSIM.

Users have access to the "povo2.0" network, as well as over 100,000 "GigaZou Wi-Fi" hotspots, which can be used free of charge for three years across up to five devices. The plan carries no monthly fee and offers data packages of 100 GB, 500 GB, or 1 TB over a three-year period, supplemented by optional flat-rate passes: 6 hours for 250 yen or 24 hours for 330 yen.

This model update is also based on the results of a user survey conducted by FCCL. In the survey, approximately 85% of respondents stated that they chose the notebook primarily for its weight and portability. More than 20% expressed dissatisfaction with the battery life, while about 38.7% indicated that they use their notebook in different rooms throughout their homes. As a collaborative project, FCCL has introduced the "FMV Zero GODZILLA EDITION (FMV WU3G-L3)" to coincide with the release of the film "Godzilla-0.0." Weighing approximately 886 grams and housed in a magnesium chassis, the device meets MIL-STD-810H standards and can be configured with either an AMD Ryzen AI 7 445 or a Ryzen AI 5 430 processor.

The notebook comes equipped with 16GB or 32GB of RAM, SSD storage options ranging from 256GB to 2TB, and runs Windows 11 Home or Pro. Visually, it features a black Godzilla motif on the lid, stylized dorsal fins on the touchpad, a "G-0.0" logo on the Enter key, a limited-edition base, pre-installed wallpapers, and a cursor shaped like a footprint.

A compatible power adapter will also be available for separate purchase starting in late November. The device will make its public debut on November 3, 2026, at "Godzilla Fest 2026"—an event hosted by the production studio Toho at TAKANAWA GATEWAY CITY—coinciding with the theatrical release of the film, which is directed by Takashi Yamazaki.

Pre-orders via the company’s online shop, the FMV Store, opened at 1:00 PM. Standard shipments of the devices are set to begin in mid-November, with the Godzilla edition scheduled to ship starting in late November. Five variants of the "Note U" series will be available in physical retail stores beginning November 13, 2026, with prices starting at just over 260,000 yen (excluding tax).

mundophone

 

TECH

Data-driven operation of biogas plants: Generating electricity when wind and solar power are scarce

Under planned amendments to the German Renewable Energy Sources Act, biogas plants are expected to supply electricity primarily when wind and solar power generation is low and electricity prices are high. The Fraunhofer Institute for Interfacial Engineering and Biotechnology IGB demonstrates how existing plants can be operated in response to electricity prices using digital technologies. A specially developed data platform makes process data from biogas plants available for forecasts, soft sensors, and AI-supported operational optimization. The approach can also be applied to other process engineering facilities, including wastewater treatment and agricultural irrigation systems.

Biogas plants are considered the third pillar of renewable electricity generation in Germany. Unlike solar and wind power, electricity generation from biogas is largely independent of weather conditions and can generally be scheduled. With an amendment to the Renewable Energy Sources Act (EEG) planned for 2027, the regulatory framework is expected to place greater emphasis on flexible, market-oriented electricity generation: Biogas plants would supply electricity primarily when solar and wind generation is low. To support this shift, the number of operating hours eligible for remuneration is expected to be limited.

For operators of the nearly 10,000 biogas plants currently operating in Germany, the timing when electricity is fed into the grid from combined heat and power (CHP) units will increasingly determine the economic viability of their operations. Expanding gas storage capacity is likely to be economically viable for only some older plants. Fraunhofer IGB has developed a cost-effective digital approach to electricity-price-based operation: An “Edge Device” is connected to the existing plant control system, consolidates process and operational data, and makes these data available on-site for models and AI applications—without requiring changes to the existing control logic.

Biogas plants generate more data than they use...A biogas plant generates a significant amount of data: Sensors measure temperatures in the digester, the composition of the biogas, and the fill level of the gas storage tank. The plant control system tracks the rotational speeds, runtimes, and operating statuses of pumps and agitators. It also logs warnings and malfunctions. Other information is not measured directly but is equally crucial—such as which substrates are fed into the system and in what quantities.

However, the majority of this information is used solely for the immediate operation of the plant. “For long-term analyses, forecasts, or comprehensive optimization, the data are often not available in the required format,” explains Alexander Laug, a process engineer at Fraunhofer IGB. Measured values are often stored only for a limited time, data structures vary, and important contextual information—such as operating states or threshold values—is available only separately.

Optimizing the operation of a biogas plant requires the various data sets to be considered together. A temperature reading of “40 degrees,” for example, only gains meaning within the context of the plant: In which tank was it measured, and what setpoint applies there? Is the associated pump running, and is the plant in automatic or manual mode? Which substrates were added previously, and how is gas production developing?

A data platform in the control cabinet...The Edge Device brings these data together. “Our Edge Device is an industrial computer that is installed on-site. It adds a data processing and computing layer to the existing programmable logic controller (PLC),” explains Laug. The Edge Device retrieves process and operational data from the PLC, stores them over extended periods, and organizes them in a consistent structure. This creates a common data foundation that links current measurements, historical trends, and associated operating states. External information, such as electricity price forecasts and weather forecasts, can also be integrated.

Data processing takes place directly on-site. “Operational data do not necessarily have to be transferred to an external cloud,” Laug explains. Instead, operators decide for themselves which data leave the plant and which are processed exclusively locally. In doing so, Fraunhofer IGB relies on a technical architecture that is as open as possible. This allows the platform to be adapted to different plants and tasks and expanded with additional models or applications.

The Edge Device bridges conventional plant automation and data-driven plant operation. While the PLC remains responsible for reliable plant control, the Edge Device adds data storage, analytics, and computing capabilities for forecasting, optimization, and AI models. Multiple applications can build on the same data foundation. These may include electricity price and gas production forecasts, soft sensors, energy optimization, and predictive maintenance.

From data to decisions...The real added value arises when the aggregated data are transformed into concrete operational recommendations. The system takes into account not only the plant’s current status but also how it has evolved over time. “It can determine how gas production and gas composition have changed following the addition of a specific feedstock, how full the gas storage tank is, or how long pumps and other equipment have been running,” explains Laug. Not every application needs to intervene directly in the plant control system. Models can initially focus solely on analyzing data and generating recommendations for operational staff.

Generating electricity when it delivers the greatest value...For electricity-price-based operation, the data platform combines the current plant status with electricity price forecasts. “A high expected electricity price alone is not enough to make a decision—sufficient gas must also be available, and the plant must be technically capable of operating as planned,” says Laug.

Accordingly, the system considers expected gas production, the gas storage level, available combined heat and power (CHP) capacity, and technical operating constraints. Based on these inputs, the model proposes an operating schedule: When should biogas be stored? When should the CHP unit run? And when is electricity generation likely to yield the highest revenue at forecast market prices?

Feedstock also influences electricity generation...Digital optimization can begin even earlier in the process, because the amount of biogas available at a given time depends largely on the feedstock supplied to the digester. Substrates differ in their organic content, biogas yield potential, and cost. They also produce biogas at different rates. By combining these data with historical operating data, it becomes possible to assess how a particular substrate mix affects subsequent gas production and, in turn, electricity generation.

The data platform developed at Fraunhofer IGB makes process data from biogas plants usable: as a basis for forecasts, soft sensors, and AI-supported operational optimization. © Fraunhofer IGB

“An optimization model can calculate how an available substrate mix should be composed without exceeding the digester’s permissible load limits,” explains Laug. At the same time, substrate costs and expected gas production can be taken into account. The goal is not to produce as much gas as possible. What matters is when and how much gas is available, what it costs to produce, and how it can subsequently be used as effectively as possible. Operators can already test a simulation tool on the institute’s website that illustrates the effects of substrate mix and electricity prices on a biogas plant operating strategy optimized in line with electricity prices.

Applicable to other process engineering facilities...The principle underlying this data infrastructure can be applied to other process engineering facilities—from wastewater treatment plants to irrigation systems and drinking water supply systems. These facilities generate a large amount of measurement data and operational information, which are currently used primarily for real-time control. In wastewater treatment plants, for example, typical opportunities for optimization include more demand-driven aeration of the biological treatment stage and the monitoring of energy-intensive equipment.

Existing facilities therefore do not need to be completely rebuilt to make better use of their data. Laug sums it up: “The first step toward a smart facility is to bring existing information together in a reliable, understandable data foundation. Forecasts, soft sensors, and model-based operational optimization can then be built on that foundation.”

Data-driven operation of biogas plants allows them to scale up electricity generation flexibly when intermittent renewables like wind and solar power are scarce.

How data-driven biogas operations work:

• On-site edge computing: Industrial computers—such as the Edge Device developed by Fraunhofer IGB—sit alongside existing programmable logic controllers (PLCs) to aggregate, clean, and store operational data locally without forcing constant cloud transfers.

• Contextual data unification: Systems combine scattered data points—such as digester temperatures, pump runtimes, agitator statuses, feedstock types, and gas storage tank fill levels—into a single coherent framework.

• External forecasting integration: The platform integrates external data like real-time weather forecasts and electricity price forecasts to predict market demand and generation shortfalls.

• Automated scheduling: Combined heat and power (CHP) units are scheduled dynamically: biogas is stored during surplus wind and solar periods and combusted to generate power when prices peak or green energy drops.

Core benefits for the energy grid:

• Balancing intermittency: Biogas acts as a dispatchable, firm baseload renewable pillar that can ramp up or dial back independently of weather conditions or time of day.

• No large battery requirement: Storing biogas in tanks above the digester provides a built-in buffer, avoiding the high cost of utility-scale chemical battery storage.

• Maximized revenue: Plant operators optimize generation windows to sell electricity when market value is highest rather than running continuous, uncoordinated baseload output.

© Fraunhofer IGB