AntiMalwareJuly 23, 2026🇷🇺Translated from Russian

VK Tech Adds Multi-Level Memory to AI Agents in VK AI Space Platform

VK Tech has enhanced its VK AI Space platform by adding multi-level memory capabilities to GenAI agents. The update allows agents to preserve context across interactions, reuse previously prepared materials, and take into account past corrections made by employees.

The company expects the new memory system to cut the proportion of repeatedly solved tasks by 40–50 percent. Memory is organized into four distinct layers that operate together to give agents longer-term awareness while maintaining strict access controls.

Four Memory Layers

  • Session memory stores the current dialogue flow and active tasks.
  • User memory records an employee’s profile and individual preferences.
  • Project memory collects materials, decisions, and rules specific to a given project.
  • Agent memory captures the agent’s own working experience, including approaches that produced results and subsequent human adjustments.

With these layers in place, an agent evolves from a short-term digital assistant into a consistent team participant. For example, when preparing a tender response, the agent can draw on the corporate knowledge base, incorporate previous employee edits, and retain both the original data and the revised versions for future use.

The same mechanism applies to incident investigations, project reporting, and product launches. Agents can locate similar past cases, recall the decisions taken, and factor in the reasoning that led to those decisions.

Access to information remains tightly controlled. An agent receives only the data that the collaborating employee is permitted to see. All stored information resides inside the company’s own infrastructure and is never transmitted to external services. Employees can review the contents of any memory layer and delete unnecessary entries at any time.

VK Tech states that the approach will help organizations convert the experience of individual specialists into a durable corporate asset that persists beyond any single conversation and transfers across successive tasks.

Related articles

HabrOther

Same-Origin Policy and CORS: How Browsers Enforce Web Security Boundaries

The article explains the core browser security mechanism known as Same-Origin Policy that prevents scripts from one website from reading data belonging to another. It details how origin is defined strictly by protocol, domain, and port, and why this matters for everyday web interactions such as banking sessions. The text clarifies that the policy blocks reading of cross-origin responses while still allowing loading of images, scripts, and iframes. CORS is presented as the controlled relaxation of this rule, where the target server explicitly grants permission via response headers. The piece emphasizes that CORS does not protect servers from direct requests made outside browsers and that authentication remains the true defense for APIs. Multiple practical examples illustrate the difference between displaying foreign content and programmatically reading its data.

AntiMalwareOther

Security Vision 5 Strengthens Connectors, Analytics and Data Handling Features

Security Vision has released an update to its SV5 platform focused on improved integrations, deeper analytics and more flexible configuration management. The release introduces namespace configuration for the WMI connector to execute WQL queries at specified addresses, along with event compression during transmission in connector configurations. An updated librdkafka library now enables the Kafka connector to support SASL/SCRAM authentication for Kafka versions 4.0.0 and higher. Data transformation capabilities have been expanded to allow conversion of numbers between binary, octal and hexadecimal numeral systems, while the Formula transformation adds abs() and sqrt() functions. Linear and bar charts receive new scaling settings, and report generation through the portal has been moved to asynchronous mode to prevent interface freezing during long exports. Additional changes affect object cards, type and directory editors, module settings, graph icon management with mapping conditions converted to filters, and a dedicated section for correlation rules with a general view and editor. The audit log now records grouping changes separately for system and user directories, and the platform blocks execution of disabled connectors through workflows.

HabrOther

Building Secure MLOps Platforms in Air-Gapped Environments for DevOps Engineers

The article explains how DevOps engineers can construct a minimal yet complete MLOps platform inside a closed, air-gapped network without relying on any cloud services. It highlights the cultural gap between data scientists and DevOps teams and shows how MLOps practices such as data versioning, experiment tracking, and model registries bridge that gap. The architecture separates GPU training nodes from a Kubernetes serving cluster and uses open-source components including ArgoCD for GitOps, MLflow with PostgreSQL, MinIO, DVC, OpenBao, and External Secrets Operator. Special attention is given to secrets management with SOPS and age keys, image scanning with Trivy and Bandit, and secure Docker access via socket proxy on the training server. The setup avoids Kubeflow and HashiCorp Vault due to complexity and licensing concerns, favoring lighter, license-friendly alternatives suitable for isolated perimeters.

HabrOther

How the Modern Web and HTTPS Emerged from Simple Two-Computer Networks

The article traces the evolution of internet infrastructure from two friends connecting PCs with twisted-pair cable and assigning IP addresses to the global system of DNS, routing, and public-key certificates. It explains how early local networks expanded with switches, always-on servers, and domain names to solve the problem of changing IP addresses. As networks grew and interconnected through routers and ISPs, new risks of eavesdropping and traffic redirection appeared on open paths. The solution introduced centralized certificate authorities such as the fictional Sectigo that issue chained certificates rooted in pre-installed trust stores. The piece details the structure of certificates, key pairs, signing chains, and the browser validation process that enables encrypted HTTPS sessions. Written in accessible language with deliberate simplifications, the text serves as an educational overview rather than a technical manual.