AI Risks & Safety · All reports

AI Risks & SafetyResearch paperSource analysis

Can ‘emotion’ steering improve an AI model’s cyber-task performance?

An unreviewed company preprint tested 171 internal steering directions in one 4-billion-parameter cyber model. Fixed directions produced uncertain gains; a request-by-request router improved Cybench subtask success by 4.2 percentage points across ten seeded campaigns.

By The Impact of AI Editorial Desk•Released 24 October 2026 at 17:03 BST•3 min full report · 1 min summary•1 source · view evidence

The short version

What happened
Researchers derived 171 steering directions, generated 61,560 emotion-conditioned stories plus 1,004 neutral dialogues and tested one 4-billion-parameter specialist model on Cybench.
Who it affects
Security teams may eventually gain more adaptable tools for triage and testing, but small benchmark gains do not justify autonomous deployment. Organisations still need scoped permissions, logging, human review and clear rules for dual-use work.
What remains unproven
The paper is an unreviewed preprint and all authors are affiliated with Alias Robotics, which develops cybersecurity AI. No funding or conflict statement was identified in the paper.

Keep in mind

The paper is an unreviewed preprint and all authors are affiliated with Alias Robotics, which develops cybersecurity AI. No funding or conflict statement was identified in the paper.

Experiments used one 4-billion-parameter specialist checkpoint and one cybersecurity benchmark. They did not test live attacks, real penetration tests or outcomes affecting people or systems.

Many directions, layers and doses were screened. The headline fixed-steering intervals included zero, and the reported uncertainty is not a substitute for an independently preregistered replication.

The emotion labels describe constructed activation directions; the study does not demonstrate consciousness, feelings or human-like psychology in the model.

Source analysis · 1 linked source. Primary analysed source date: 21 October 2026.

Read the full report · 3 min The evidence, methods, implications and limitations

The strongest result came from routing each request, not one fixed mood

An unreviewed preprint reports that modifying a cybersecurity model's internal activations can change its benchmark performance. The researchers derived 171 directions associated with emotion words, using 61,560 generated stories and 1,004 neutral dialogues to locate directions in the model's hidden state. They then tested a 4-billion-parameter Alias Robotics model on Cybench challenges and guided subtasks.

Applying one fixed direction—calm, desperate or serene—raised success by roughly 1.6 to 2.3 percentage points in ten-seed tests, but every 95% confidence interval crossed zero. The clearer result used a small decision head to route each request among three directions according to the apparent task category. Across ten seeded campaigns, success improved by 4.2 percentage points, with a reported 95% interval of +2.2 to +6.1.[1]

‘Emotion’ is an intervention label, not evidence that the model feels

The method adds a vector to the model's residual stream at selected layers. Calling the vectors calm or desperate describes how training texts were organised; it does not establish subjective emotion, intention or a human-like psychological state. The router analysed the final 2,000 context characters and added about 83 milliseconds per classification, small beside the reported model-response times.

For defenders, steering could help a specialist assistant adapt between cryptography, web, reversing and forensic tasks without retraining. The same capability is dual use: any reliable improvement in automated cyber reasoning could also support misuse. This experiment does not show that. It used one checkpoint, one benchmark, many screened conditions and ten seeds—not live penetration tests, diverse models or operational attackers. Independent replication with preregistered choices would change the assessment.[1]

The distinction that matters

What changed benchmark success?

The paper separates fixed steering from a request-aware router.

No steering

Run the specialist model normally

Benchmark baseline

Fixed direction

Apply one direction to every request

+1.6 to +2.3 points; intervals included zero

Per-request router

Choose among calm, serene and desperate

+4.2 points; 95% CI +2.2 to +6.1

Reported Cybench subtask results from the unreviewed preprint. Percentage-point changes are not estimates of real-world attack success. Source: arXiv

Continue the story

Read next

All reports
Explore the full source and evidence record

What this means for people

  • Security teams may eventually gain more adaptable tools for triage and testing, but small benchmark gains do not justify autonomous deployment. Organisations still need scoped permissions, logging, human review and clear rules for dual-use work.

Global context

The model and authors are based in Spain, while Cybench is an international research benchmark. Operational security practices, legal permissions and threat models differ by jurisdiction; a benchmark improvement cannot be transferred directly to deployed cyber agents.

What the evidence does not yet show

  • The paper is an unreviewed preprint and all authors are affiliated with Alias Robotics, which develops cybersecurity AI. No funding or conflict statement was identified in the paper.
  • Experiments used one 4-billion-parameter specialist checkpoint and one cybersecurity benchmark. They did not test live attacks, real penetration tests or outcomes affecting people or systems.
  • Many directions, layers and doses were screened. The headline fixed-steering intervals included zero, and the reported uncertainty is not a substitute for an independently preregistered replication.
  • The emotion labels describe constructed activation directions; the study does not demonstrate consciousness, feelings or human-like psychology in the model.

What to watch next

  • Independent replication on other open and commercial cybersecurity models
  • Preregistered tests that separate router selection from activation steering
  • Evaluation on realistic defensive tasks with permission boundaries and failure costs
  • Whether gains persist after correction for the number of conditions explored

Living evidence record

Impact record IAI-0HZRIM4

Explore the full tracker

Evidence stage

Studied

Confidence

Supported

Reporting basis

Source analysis

Independent or research support

Not yet

Record status

Monitoring

Last checked

24 October 2026

Source trail

1 direct source across 1 source type.

People impact

Documented in this record.

Uncertainty

Limits and next checks are explicit.

Stages describe the evidence available—not whether a technology is good or bad. See the public method.

Single-source reporting disclosure

This record analyses one direct source. It can establish what arXiv published or reported, but it is not independent corroboration of every performance claim or predicted outcome. The confidence label will change only when broader evidence is added.

Evidence trail

Sources used for this report

Links checked 24 October 2026

1arXiv• Research paper• 21 October 2026• SpainThe Psychology of an AI HackerUnreviewed preprint submitted 21 October 2026. All authors are affiliated with cybersecurity company Alias Robotics. The paper reports experiments on one 4-billion-parameter specialist model and Cybench; no funding or conflict statement was identified in the paper.
Research question, topics and regions

Whether steering internal representations labelled with emotional concepts can change a specialist AI model's performance on cybersecurity benchmark tasks

Topics: Cybersecurity agents · Activation steering · Model internals · Cybench · Dual use

Regions: Spain · International

This report is labelled source analysis. We summarise and analyse source material in our own words; company statements remain attributed claims until independently supported. Translated summaries preserve the meaning of the original source and link back to it. Read our editorial standards.