SDAIA to Asharq Al-Awsat: Saudi Arabia Moving from Adopting AI Standards to Shaping Them

 Saeed bin Mohammed Al-Shahrani, SDAIA spokesman (SDAIA)
Saeed bin Mohammed Al-Shahrani, SDAIA spokesman (SDAIA)
TT

SDAIA to Asharq Al-Awsat: Saudi Arabia Moving from Adopting AI Standards to Shaping Them

 Saeed bin Mohammed Al-Shahrani, SDAIA spokesman (SDAIA)
Saeed bin Mohammed Al-Shahrani, SDAIA spokesman (SDAIA)

AI ethics is no longer merely a matter of broad principles for regulators, particularly with the emergence of autonomous agents capable of making decisions and taking actions with minimal human intervention. In Saudi Arabia, the Saudi Data & AI Authority (SDAIA) maintains that an intelligent system does not bear legal responsibility when harm occurs; responsibility remains with the developer and the entity operating it.

Saeed bin Mohammed Al-Shahrani, SDAIA spokesman, told Asharq Al-Awsat in an exclusive interview that traditional governance frameworks are no longer sufficient to keep pace with such developments. In his view, high-risk decisions require human oversight, clear chains of responsibility and documented, operational emergency shutdown mechanisms.

His comments come ahead of the fourth UNESCO Global Forum on the Ethics of Artificial Intelligence, hosted in Riyadh from Sept. 14-17, marking the first time the international forum is being held in the Arab world. More than 100 speakers will take part in dozens of sessions and workshops, including ministers, policymakers, experts, academics, representatives of international organizations and the public and private sectors, as well as technology executives.

Global Forum Priorities

The program begins with preparatory meetings and gatherings of international networks involved in implementing UNESCO’s Recommendation on the Ethics of Artificial Intelligence, as well as a closed strategic briefing for ministerial participants and a ministerial dialogue on international cooperation.

The forum will review five years of implementing UNESCO’s recommendation, adopted in 2021, and discuss financing governance systems and building regulatory capacity. It will also see the launch of the updated Readiness Assessment Methodology, RAM 2.0, based on analysis of more than 55 readiness reports.

Sessions will address practical issues including AI use in public administration, health and humanitarian work, youth mental health, the environment, energy and water, linguistic diversity — including Arabic — as well as physical AI, robotics and human-machine relations in the workplace.

From Principles to Engineering Requirements

Five years after UNESCO adopted its AI ethics recommendation, Al-Shahrani sees the main problem as no longer a lack of principles, but the difficulty of translating them into tools developers and regulators can use and against which compliance can be measured.

He described the key gap as the “operational translation of principles”: turning concepts such as fairness, transparency and accountability into engineering requirements, standardized tests and binding regulatory controls for developers. He also pointed to disparities in governments’ ability to conduct hands-on technical assessments and monitor systems before deployment and during operation.

In Saudi Arabia, SDAIA has introduced principles and frameworks governing the relationship between people, data and AI technologies, Al-Shahrani said, covering integrity and fairness, security and privacy, humanity, social and environmental benefits, reliability and safety, transparency, as well as accountability and responsibility.

Flexible Regulation

Al-Shahrani identified building specialized governance skills and institutional capacity as a major readiness challenge, noting that technology is evolving faster than people can adapt.

He continued that SDAIA is pursuing a “flexible regulation” strategy based on continuous assessment and providing companies with self-assessment tools rather than imposing complex bureaucratic procedures.

The approach comes amid growing debate within the AI industry over whether safety and oversight measures can keep pace with the rapid development of advanced models.

From Adopting Standards to Shaping Them

SDAIA does not necessarily expect the world to reach a single detailed AI law. Al-Shahrani acknowledged the difficulty of establishing one detailed framework given differences in legal systems and economic priorities among the United States, Europe, China and others, but considers convergence on fundamental principles and safeguards “possible and necessary.”

What is needed, he argued, is not a single dominant model but common ground on issues such as safety and ethics, while narrowing the gap between technological powers and emerging markets.

Al-Shahrani told Asharq Al-Awsat that Saudi Arabia has become an active participant in shaping international AI rules and initiatives by sharing its expertise, partnerships and a vision that seeks to balance innovation and governance.

He highlighted cooperation with UNESCO and other international institutions, as well as the establishment in Riyadh of the International Center for AI Research and Ethics (ICAIRE), under UNESCO’s auspices.

The center is intended to help move AI ethics from broad principles to practical implementation by embedding them in scientific research, education, standards, innovation and public policy from the earliest stages of technology development — reflecting Saudi Arabia’s desire to help shape standards rather than merely apply rules formulated elsewhere.



CEO: Amazon Cloud Capacity Sold Out Through 2027

FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo
FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo
TT

CEO: Amazon Cloud Capacity Sold Out Through 2027

FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo
FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo

Amazon CEO Andy Jassy said on Friday that Amazon Web Services' cloud computing capacity is largely sold out through 2027, with significant commitments extending into 2028, on growing demand for AI infrastructure.

In a video podcast with Andreessen Horowitz co-founder Ben Horowitz and general partner Erik Torenberg, Jassy said Amazon is struggling to keep pace ⁠with the insatiable ⁠demand from AI labs and enterprises.

Earlier this year, Amazon had said it would spend about $220 billion in capital expenditure for 2026.

According to Reuters, Jassy said the ⁠company "could invest a lot more and it wouldn't be a bad use of capital," considering cloud-computing capacity for 2026 is already sold out.

"2027 is largely sold out. We always leave a certain amount for on demand and our inference service bedrock, or EC2, but largely sold out ⁠all ⁠the big chunks. A good chunk of 2028 is sold out," he said.

EC2 is an AWS service that provides cloud servers for running applications, while Bedrock gives customers access to AI models to build generative AI applications.

Amazon is scheduled to report third quarter results on October 29.


New ‘Scentronic’ Technology Can Detect and Transmit Aromas Remotely

Ohio State University researcher Chunyu Yang wears a prototype odor generator device which is part of a technology called Scentronic that can detect scents and transmit them remotely, at Columbus, Ohio, on June 13, 2025, in this image released October 21, 2026. (Shaoru Cheng/Handout via Reuters)
Ohio State University researcher Chunyu Yang wears a prototype odor generator device which is part of a technology called Scentronic that can detect scents and transmit them remotely, at Columbus, Ohio, on June 13, 2025, in this image released October 21, 2026. (Shaoru Cheng/Handout via Reuters)
TT

New ‘Scentronic’ Technology Can Detect and Transmit Aromas Remotely

Ohio State University researcher Chunyu Yang wears a prototype odor generator device which is part of a technology called Scentronic that can detect scents and transmit them remotely, at Columbus, Ohio, on June 13, 2025, in this image released October 21, 2026. (Shaoru Cheng/Handout via Reuters)
Ohio State University researcher Chunyu Yang wears a prototype odor generator device which is part of a technology called Scentronic that can detect scents and transmit them remotely, at Columbus, Ohio, on June 13, 2025, in this image released October 21, 2026. (Shaoru Cheng/Handout via Reuters)

People can readily share images and sounds digitally, as evidenced by the billions of smartphones in use globally that often overload the human senses of sight and hearing. But smell generally remains missing from remote communication. That could soon change.

Researchers have developed technology that features an electronic nose that recognizes certain smells, like the distinctive aroma of coffee, and then instructs a small and wearable remote device to release scent molecules matching it. The digital communication can take place at any distance, from across the room to around the world.

"In simple terms, it connects 'smelling something here' with 'recreating the corresponding smell somewhere else,'" said Chunyu Yang, an Ohio State University doctoral student in materials science and engineering and lead author of a study describing the technology published in the journal Science Advances.

"The idea is to add smell to the visual and audio information we already share remotely, making those experiences more engaging," Yang said.

The researchers call this latest development in the field of digital scent technology "Scentronic."

"What makes Scentronic ‌different is that ‌it brings odor sensing and generation together for remote sharing. To the best of our knowledge, ‌our ⁠study is the ⁠first to explore this integration in a compact platform for remote odor sharing," Yang said.

The researchers created an e-nose, a device that uses an array of gas sensors to detect chemical compounds associated with different odors. A machine-learning model then classifies odors that the e-nose has been trained to recognize — cake, coffee and oranges.

The technology uses an online platform to transmit the odor information to a scent generator, which then releases fragrances to recreate the aroma at the receiving end. The scent molecules themselves are not transmitted over the internet.

The e-nose device is roughly 6 inches (15 cm) in diameter and is portable, though not designed to be worn. The researchers developed several versions of ⁠the odor generator, including wristband, necklace and handheld designs.

'EVERYDAY ODORS'

At this point, the e-nose recognizes ‌just the five scents.

"We chose these because they are familiar everyday odors with ‌different scent profiles, making them useful examples for demonstrating the system. We have not yet expanded beyond those categories," Yang said.

"A broader scent library ‌is possible in principle, but an unlimited repertoire is far beyond what we have demonstrated. Recognizing an odor and accurately reproducing ‌it are separate challenges. Covering a useful range of everyday scents is a more realistic goal, although that would still require substantial development," Yang said.

The receiving device cannot recreate every smell Scentronic encounters.

"To support additional odors, we would need to train the electronic nose to recognize them and provide corresponding scented liquids in the odor generator," Yang said.

The researchers see various potential applications for the technology.

"For example, someone could share the scent of ‌a meal with family or friends who live far away. Other potential applications include more immersive virtual and augmented reality experiences and online shopping that allows customers to sample selected scents remotely," ⁠Yang said.

'A RESEARCH PROTOTYPE'

The research ⁠was conducted and the devices developed without the involvement of a company, Yang said.

"At present, this is a research prototype. Moving toward commercialization would require a larger, more diverse training dataset and reliable odor recognition under real-world conditions, where smells often occur in mixtures," Yang said.

"The odor generator would also need further development to support more scents while remaining compact and convenient to use. Other considerations include scent fidelity, refillability, durability, manufacturing costs and the safety of repeated exposure to the scented mist," Yang said.

Smartphones are becoming increasingly capable. Could they in the future incorporate scent technology so that, for instance, a person at a tailgate party before an Ohio State football game could call a friend and share video, audio and the aroma of hot dogs on the grill?

"In principle, a smartphone could connect to a scent-generating accessory. Integrating everything into the phone itself would be more challenging because the scent reservoirs, electronics and atomizers all take up space and add weight. Miniaturization and convenient refilling would be important considerations," Yang said.

"The tailgate example illustrates the idea well. A future system could potentially combine video and audio with a corresponding scent, provided it could recognize the relevant odor and the receiver had a suitable scent formulation available. Our current system has not demonstrated the transmission of a grilling-hot-dog scent or the exact mixture of smells at a tailgate party," Yang said.


Websites Go Dark as AI Exposes Critical Security Flaws

Computer code is displayed on multiple screens in this illustration taken on October 22, 2026. (Reuters)
Computer code is displayed on multiple screens in this illustration taken on October 22, 2026. (Reuters)
TT

Websites Go Dark as AI Exposes Critical Security Flaws

Computer code is displayed on multiple screens in this illustration taken on October 22, 2026. (Reuters)
Computer code is displayed on multiple screens in this illustration taken on October 22, 2026. (Reuters)

Governments and companies around the world shut down websites Thursday as they raced to protect themselves from hacks after artificial intelligence uncovered critical flaws in a widely used programming language called PHP.

PHP helps run about 70 percent of the world's websites -- from online stores and news outlets to government services -- according to Wiz Research, one of the cybersecurity firms that found the two flaws.

Created in the early 1990s, PHP originally stood for "personal home page" but now means "hypertext preprocessor" and sits underneath popular web design platforms.

"These findings rank among the most severe vulnerabilities discovered in PHP, and arguably in software history," a Wiz blog post said.

Increasingly powerful AI models can spot weak points in back-end computer code that have gone unnoticed by humans for years.

That has heightened cybersecurity fears, with the number of software vulnerabilities discovered worldwide in 2026 on track to roughly double last year's record total.

- 'Quite devastating' -

PHP programmers released a fix Wednesday, and the US National Security Agency told organizations to patch their sites immediately or pull vulnerable systems offline -- a call echoed by authorities from China to the European Union.

Amazon Threat Intelligence said it had identified a hacking attempt carried out before the PHP security flaws were made public.

"It remains unclear how the actor acquired exploit information," it said, describing the incident as the "targeting of a honeypot" from an anonymized internet connection.

But Ryan Austin, who has worked on PHP issues for cybersecurity firm Calif, told the BBC: "At the moment, it doesn't look like exploitation has taken off or been widespread."

Only sites that run PHP on their own servers are exposed. Many large platforms are built on other programming languages or use operators that could install the fix quickly and were able to stay online.

Rahat Masood, senior lecturer in cybersecurity at the University of New South Wales, Sydney, described the discovery as "quite devastating".

It could allow "attackers to get into your servers without any authorization, without any username or password", she told AFP.

"Once they are in the servers, they can do anything they want" -- from stealing sensitive information to modifying website content -- she added, urging institutions to "take it seriously."

- 'New phase' -

Government agency sites in countries from Australia to Finland, the Netherlands and the United Kingdom were among those that went dark. Services from insurance firms, transport operators and media outlets were down for emergency maintenance.

Popular apps, including a Pokemon sleep tracker, were also temporarily taken offline while the fix was implemented, while the foundation that runs Wikipedia warned users they could see outages while it addressed the flaws.

"If you run PHP, it is imperative that you update now," the PHP Foundation, which funds developers working on the language, said in a blog post.

Volker Dusch, a security engineer at the foundation, told the Wall Street Journal it was the most serious problem PHP had faced in more than a decade, comparing it to Heartbleed, a 2014 flaw that set off a worldwide rush to patch.

Security firm Calif found the flaws in August using OpenAI's GPT-5.6 Sol model, as part of an OpenAI-funded audit of PHP's code.

OpenAI said the discovery "marks a new phase, where AI can find security bugs with internet-scale impact."

Wiz, which is owned by Google, said it found them independently weeks later with help from AI models including Google's Gemini 4 Argon and GPT-5.6 Sol.

The flaws had been reported privately to PHP's developers and kept confidential while a fix was prepared.

- AI fuels urgency -

Details leaked online Tuesday, a day before the planned release of the fix -- prompting the rush to take sites offline before hackers could exploit them.

Steve Kerrison, senior lecturer in cybersecurity at the Singapore campus of James Cook University, told AFP that the fear of hackers using AI to quickly and easily exploit the PHP vulnerabilities had fueled urgency to react.

Larger institutions, from government agencies to news outlets, should be able to fix their websites relatively fast, Kerrison said -- but others may be left vulnerable.

"There are sites, systems and people out there who will have no idea about this and still won't for days, weeks and months," Kerrison warned.

That may include user-run blogs that could be weaponized to spread computer viruses, spam people or distribute malicious content, he said.