AntiMalwareJuly 23, 2026🇷🇺Translated from Russian

VK Tech Adds Multi-Level Memory to AI Agents in VK AI Space Platform

VK Tech has enhanced its VK AI Space platform by adding multi-level memory capabilities to GenAI agents. The update allows agents to preserve context across interactions, reuse previously prepared materials, and take into account past corrections made by employees.

The company expects the new memory system to cut the proportion of repeatedly solved tasks by 40–50 percent. Memory is organized into four distinct layers that operate together to give agents longer-term awareness while maintaining strict access controls.

Four Memory Layers

  • Session memory stores the current dialogue flow and active tasks.
  • User memory records an employee’s profile and individual preferences.
  • Project memory collects materials, decisions, and rules specific to a given project.
  • Agent memory captures the agent’s own working experience, including approaches that produced results and subsequent human adjustments.

With these layers in place, an agent evolves from a short-term digital assistant into a consistent team participant. For example, when preparing a tender response, the agent can draw on the corporate knowledge base, incorporate previous employee edits, and retain both the original data and the revised versions for future use.

The same mechanism applies to incident investigations, project reporting, and product launches. Agents can locate similar past cases, recall the decisions taken, and factor in the reasoning that led to those decisions.

Access to information remains tightly controlled. An agent receives only the data that the collaborating employee is permitted to see. All stored information resides inside the company’s own infrastructure and is never transmitted to external services. Employees can review the contents of any memory layer and delete unnecessary entries at any time.

VK Tech states that the approach will help organizations convert the experience of individual specialists into a durable corporate asset that persists beyond any single conversation and transfers across successive tasks.

Related articles

HabrOther

Implementing 2FA Kubernetes Access via Gateway API, Dex and MULTIDIRECTORY

A Russian cybersecurity company replaced static kubeconfig files with corporate accounts and mandatory 2FA for its Talos Linux Kubernetes clusters. The solution routes all authentication through a single FQDN using NGINX Gateway Fabric, Dex as an OIDC provider connected to MULTIDIRECTORY via LDAP, and kube-oidc-proxy for token validation and impersonation. Groups stored in the directory are passed directly into RBAC bindings, eliminating manual certificate management. A lightweight Python service dynamically generates kubeconfig files that contain no secrets. The team documented several Gateway API migration pitfalls including namespace route restrictions and BackendTLSPolicy hostname validation. The approach keeps the entire configuration in Git and avoids modifying kube-apiserver flags.

AntiMalwareOther

Windows File System Tunneling Preserves Old File Metadata for Legacy Compatibility

Microsoft has clarified that Windows sometimes assigns creation dates from deleted files to new ones due to a long-standing mechanism called File System Tunneling. The feature keeps metadata in a short-term cache for about 15 seconds after a file is deleted or renamed. If a new file with the same name is created quickly in the same folder, it inherits the previous file's timestamps and short-to-long name mappings. This behavior exists to support safe saving patterns used by many applications and to maintain compatibility with old DOS-era 8.3 filename formats. The actual file content is never restored, only the metadata. The cache is temporary and clears over time, so the effect does not occur with files deleted long ago. The explanation came after users noticed unexpected dates in Windows Explorer and questioned whether it was a bug.

HabrOther

Amazon Confirms Irrecoverable Data Loss in UAE and Bahrain Data Centers After Drone Attacks

Amazon Web Services has officially confirmed that data stored in specific availability zones within its Middle East regions was permanently destroyed following physical attacks on data centers in the UAE and Bahrain. The incidents began on March 1 and continued through April and July, damaging infrastructure tied to AI development projects. In the UAE region mec1, only zone mec1-az2 was completely destroyed with no external backups, while mec1-az3 suffered severe damage and mec1-az1 remained operational but overloaded. All three zones in the Bahrain region me-south-1 were rendered inoperable. AWS had spent six months attempting recovery before issuing the final statement on September 15, 2026, and has advised customers to migrate workloads to unaffected regions. The event highlights growing risks to data from physical-world attacks beyond traditional network threats.

HabrOther

Bots Overload OT Commerce Store on OT Box, Spike Paid OTAPI Calls Mistaken for DDoS Attack

An online store running OT Commerce experienced CPU loads reaching 98-100% and a 6-7x increase in paid OTAPI calls over three days due to automated bot traffic rather than a traditional DDoS. The site owner had already deployed a paid anti-bot module on the VPS, yet behavioral bots continued to bypass protections and force expensive calls to the external OTAPI platform for product data from Taobao, Tmall, 1688 and other marketplaces. Traffic analysis after switching to the CRONARMOR WAF revealed that 41.9% of page requests were automated, with 99.3% of early-stage automation blocked before reaching the origin server. Only 0.5% were behavioral bots visible in analytics, while legitimate search crawlers accounted for 27,190 requests that were explicitly allowed. The WAF approach stopped requests at the reverse proxy layer, preventing PHP execution, database queries and OTAPI billing events on the origin. Post-deployment CPU dropped to single digits for most of the day, eliminating both performance issues and the anomalous rise in paid API usage.