Slovenian Officials Face Scrutiny Over Testing of AI Cybersecurity Tool Linked to Pegasus

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Slovenian MP Matej Grah demanded the dismissal of Nik Gamulin, acting director of the government’s information security office, after it was revealed that the office secretly negotiated with Dream Security to test its AI cybersecurity tool, Sphere. Concerns center on transparency and the company’s links to controversial spyware Pegasus.[AI generated]

Why's our monitor labelling this an incident or hazard?

The article describes negotiations and planned testing of an AI cybersecurity tool, which involves AI system use. There is no evidence that harm has already occurred, but the involvement of a company linked to controversial spyware and the lack of transparency create a credible risk of future harm, such as privacy violations or misuse of surveillance technology. The event does not describe actual injury, rights violations, or other harms yet, so it cannot be classified as an AI Incident. It is not merely complementary information because the main focus is on the potential risks and lack of transparency around the AI system's deployment. Hence, it fits the definition of an AI Hazard.[AI generated]
AI principles
Transparency & explainabilityAccountability

Industries
Digital securityGovernment, security, and defence

Affected stakeholders
GovernmentGeneral public

Harm types
Reputational

Business function:
ICT management and information security

AI system task:
Event/anomaly detection


Articles about this incident or hazard