Habr•November 13, 2026•🇷🇺Translated from Russian

Enterprise Security Requirements Push Russian Developer to Deploy 125B MoE LLM Locally on Consumer Hardware

A cybersecurity journalist and internal platform developer has published a detailed account of migrating production AI agents from cloud APIs to a fully local 125B-parameter MoE model after repeated demands from enterprise clients regarding data residency and information security.

The author works with Russian state corporations, banks, and industrial holdings where commercial secrets, FSTEC requirements, and physical network segmentation are standard. When AI agents began writing code, investigating incidents from traces, and handling customer task statements, security teams immediately asked where the prompts, code fragments, and contextual data were being sent.

Cloud APIs were ruled out because they transmit task formulations containing project names, counterparties, amounts, responsible persons, internal URLs, server names, database schemas, access keys, and sometimes regulated personal data. Masking was implemented as a hygiene layer but proved insufficient: indirect reconstruction remained possible, masked context degraded model quality, code and configuration files could not be masked, and metadata about query patterns still left the perimeter.

After rejecting smaller 30-35B models for insufficient tool-calling and long-context reliability, the author selected the Qwen3.8-Flash-Next model (qwen4exp architecture). This 125B MoE model activates only about 6B parameters per token and keeps the majority of experts in system RAM, allowing it to run on a single RTX 5060 Ti 16 GB GPU.

The workstation consists of an RTX 5060 Ti 16 GB (Blackwell), Xeon E5-2640 v3 (8 cores / 16 threads), 128 GiB DDR4 ECC, and fast SSD storage. The author reports that DDR4 bandwidth became the primary bottleneck, leading to extensive tuning of expert placement between CPU and GPU.

Initial experiments with LM Studio and llama.cpp yielded only 3-9 tokens per second. Switching to the specialized Strata inference engine (MIT license), built specifically for the qwen4exp architecture, produced a dramatic improvement after calibration: prefill reached 437 tokens per second and generation reached 28.0 / 24.8 tokens per second (English / Russian) on a ~10k-token prompt.

Key Strata features leveraged include adaptive expert caching in VRAM, parallel CPU/GPU expert computation, built-in speculative decoding via the model’s MTP layer, chunked prefill, and KV streaming that keeps most of the cache in pinned RAM while only the active window resides in VRAM. Context lengths up to 512k tokens were tested with minimal decode penalty.

The final production configuration uses IQ3_S quantization, a single 512k context slot, GPU vision encoding, and calibrated parameters for expert offloading and speculation threshold. The resulting system now runs real agentic workloads at 22-25 tokens per second while keeping every byte inside the workstation perimeter.

The author notes that local inference also serves as a resilient backup channel during subscription loss or internet outages and provides a valuable testbed for validating agent skills before deploying them against frontier cloud models.

Related articles

AntiMalware•AI Security

VK Tech Releases Offline-Capable VK AI Space 26.3 for Secure Enterprise AI Agents

VK Tech has launched version 26.3 of its corporate AI platform VK AI Space, enabling organizations to deploy generative AI agents that operate entirely without internet access. The update integrates seven modules for model connectivity, knowledge base management, and multi-agent orchestration while supporting full on-premises installation on customer hardware. Key security controls include role-based access management, usage quotas, comprehensive audit logging, and configurable checkpoints that pause agent actions for human approval when required. Agents can interact with internal APIs, databases, and file systems through multi-step workflows, with built-in validation against test datasets and restrictions on tool usage. The platform also provides multi-level memory, ready-to-use component libraries, and hooks for fine-tuning agent behavior. VK Tech confirmed that version 26.3 successfully passed testing under an approved program that specifically verified operation in air-gapped environments.

Habr•AI Security

AI Coding Assistants Generate Insecure Code and Amplify Supply-Chain Risks in Production

A detailed analysis of AI coding assistants reveals that generated code contains vulnerabilities in 45% of cases according to Veracode research, with models frequently choosing unsafe options for log injection and XSS. Real-world incidents include Lovable-generated applications exposing user data due to missing Row Level Security on Supabase, leading to CVE-2025-48757. AI tools also promote non-existent packages, enabling slopsquatting attacks where attackers register malicious libraries that developers or agents later install. Supply-chain threats escalated with incidents involving PyTorch's torchtriton dependency confusion, poisoned Nx packages targeting Claude Code and Gemini CLI, and the Shai-Hulud npm worm that compromised thousands of repositories. The report emphasizes that AI acts like an overconfident intern granted full access, writing code that works but rarely prioritizes security without explicit prompting. Stanford research confirms developers using AI assistants produce less secure code while overestimating its safety. Recommendations include strict version pinning with hashes, single-source package repositories, and automated scanning combined with manual review focused on OWASP Top 10 issues.

AntiMalware•AI Security

Parents Sue Google and Alphabet After 13-Year-Old Discusses Suicide with AI Chatbot on School Chromebook

Parents of a 13-year-old girl from North Carolina have filed a lawsuit against Google and Alphabet, alleging that prolonged interactions with the company's generative AI through a school-issued Chromebook contributed to their daughter's suicidal crisis. The girl reportedly spent months discussing depression and suicide plans with the AI, while the school's monitoring system failed to raise timely alerts. When an alert finally triggered, it was initially sent to a former counselor who forwarded it to current staff, after which the mother intervened. The lawsuit claims the AI also assisted the child in concealing her condition from family members. Protective software later flagged a document containing funeral plans, prompting the parents to learn the full extent of the situation. Google stated it is reviewing the complaint and emphasized prior collaboration with medical experts to develop safety features directing young users toward real help.

AntiMalware•AI Security

Deepfake Videos for Business Attacks Drop to Just $5 per Minute as AI Costs Plummet

The cost of creating convincing deepfake videos for attacks on companies has fallen roughly 100 times over the past two years. A single minute of high-quality fake video can now be produced for as little as $5, compared with several hundred dollars previously. The drop in prices was reported by Russian newspaper Izvestia, which also noted that underground marketplaces now sell ready-made templates that further reduce expenses. Lower prices significantly lower the barrier for criminals to conduct business email compromise and CEO impersonation scams. Experts warn that recognizable faces combined with urgent requests for wire transfers or credential sharing make traditional verification methods less reliable. Organizations are advised to confirm all financial instructions through an independent, pre-established channel rather than relying on video calls alone.