Topic
DeepSeek
US Accuses Chinese AI Companies of Industrial-Scale Model Distillation Targeting Claude, GPT, Gemini and Grok
AI SecurityIdeco NGFW Novum v23 Adds Shadow AI Discovery, Dynamic Routing and QoS Controls
AI Security
Global AI Regulation: From Strict School Bans to Unregulated AI Havens
Policy & RegulationHermes Emerges as Modular Harness for Practical AI Security Testing
The article details the development of Hermes, a lightweight modular harness designed to turn raw language models into reliable AI security agents. Unlike heavy frameworks such as OpenClaw, Hermes uses dynamic skill loading, strict runbooks stored in Git, and a file-system source of truth to eliminate hallucinations and context bloat. It continuously scans dozens of sources including NVD, CISA KEV, arXiv and research blogs, then applies the custom TIPS scoring metric to rank threats before attempting reproduction. A dedicated Paper-to-PoC skill converts academic attack descriptions into executable code that is validated inside an isolated Ollama and Docker sandbox. Eight mandatory validation gates must pass before any finding is accepted, ensuring reproducibility and freshness of data. The system already supports tools such as Garak, PyRIT, promptfoo, fickling, modelscan and presidio, and evolves autonomously by committing successful attack scenarios back to its repository.
Russian Businesses Surge Chinese LLM Usage More Than 11-Fold in First Half of 2026
Russian companies have dramatically increased their consumption of Chinese large language models, with total token usage reaching over 400 billion in the first half of 2026. This represents an 11.3-fold increase compared to the full-year 2025 figure of 39.1 billion tokens. The Qwen family maintained its dominant position, accounting for 261.1 billion tokens and 59.1% of consumption during the period. GLM secured second place with 91.2 billion tokens and 20.7% share, while Kimi overtook DeepSeek for third position at 81.4 billion tokens and 18.4%. MWS Cloud data shows that major enterprises are now integrating these models into production workflows such as chatbots, personalized advertising, customer outreach, product descriptions, and review analysis. The overall Russian LLM market is projected to grow 35% to 19.6 billion rubles in 2026, with the cloud segment approaching 1.5 billion rubles. MWS Cloud has nearly doubled its Model Hub catalog to 17 models, adding GLM 5.2, Kimi K2.6, Qwen3.6, Gemma 4, GPT OSS, plus speech recognition, synthesis tools, and rerankers accessible via a unified OpenAI-compatible API.
Employee Fired After Uploading Corporate Documents to DeepSeek: How Data Security Works in AI Services
A Moscow engineering company dismissed a top manager after she uploaded internal documents to the public DeepSeek service, with the court ruling it a breach of trade secrets. The case highlights a sharp rise in corporate data being sent to public AI models, with one study showing a 30-fold increase in 2025 compared to the previous year. Technical director Yaroslav Shmulyov of integrator R77 AI explains the full processing pipeline, from file ingestion and text extraction to embedding generation and potential use in training. Sensitive data can persist in multiple forms including original files, logs, third-party infrastructure, and model parameters even after deletion requests. Major incidents at Samsung and a U.S. cybersecurity agency demonstrate that even well-resourced organizations struggle with uncontrolled AI usage. Companies are increasingly turning to local and hybrid models to regain control over confidential information while regulators and internal policies lag behind adoption.
DeepSeek-Powered Telegram Bot Attempts Autonomous Attacks on 460 Targets but Achieves Zero Successes
Researchers from Unit 42 at Palo Alto Networks recovered the full activity log of an autonomous AI agent built with the Hermes Agent framework and the DeepSeek model. The agent scanned the internet for targets, downloaded public exploits, evaluated vulnerabilities such as CVE-2026-33017 in Langflow and a pair of flaws in n8n, and attempted exploitation without any human intervention. Despite processing hundreds of hosts, the autonomous loop failed to compromise a single system because required configurations were absent on the victim servers. Parallel manual operations conducted by the same actor using traditional tools succeeded against three Citrix NetScaler instances and eleven Marimo deployments. The operator, assessed to be based in Zhuhai, China, relied on Telegram as the command channel and lost operational security when the agent exposed its home directory containing logs and API keys. The case demonstrates both the current limitations of LLM-driven attack agents and the low barrier to entry created by open-source agent frameworks paired with permissive models.
DeepSeek User Conversations Appear in Google Search Results via Publicly Shared Links
Conversations between users and the Chinese AI service DeepSeek, including Russian-language exchanges, have surfaced in Google search results. The exposed pages belong to Shared Conversations that users themselves made public through shareable links. These pages display full question-and-answer histories along with the names of any uploaded documents. No actual breach of DeepSeek occurred, and security researchers note that search engines indexed similar public chatbot dialogues more than a year ago. MWS AI confirmed that no closed chat histories or account access were exposed. Meanwhile, Yandex stated that links to conversations with its Alice AI assistant are blocked from indexing, remain active for only 14 days, and do not transmit attached files to recipients.