Executive Loses $5 Million Golden Parachute After Uploading Documents to DeepSeek
A top manager at a Moscow engineering company attempted to secure five million rubles after her dismissal for disclosing commercial secrets but ultimately lost the case. The court determined that uploading internal documents to DeepSeek was not an acceptable method for obtaining a golden parachute.
The woman had served as sales director for less than six months and received more than 800,000 rubles per month. Following her termination initiated by the employer, she filed a lawsuit to amend the dismissal grounds to mutual agreement and to receive the corresponding five-million-ruble compensation.
The company countered that the employee had repeatedly mishandled confidential data. She forwarded official documents via corporate email while adding her personal address in blind copy. In addition, several files from the company’s internal protected repository were uploaded to the Chinese neural network DeepSeek, which the employer argued created a risk of information interception.
The court found no operational necessity for either sending documents to an email address outside company control or placing them in a third-party AI service. These actions were classified as a gross violation of labor duties and disclosure of commercial and official secrets.
The employer further stated that after confidential information was disclosed during negotiations, one supplier ceased all communication. The company also cited the employee’s systematic failure to meet sales targets.
During proceedings the company proposed a settlement that would change the dismissal wording and pay more than 400,000 rubles, but the former employee rejected the offer in hopes of receiving the full five million. The court dismissed her claims.
The case gained attention following reports that user conversations with DeepSeek had appeared in Google search results, although the ruling did not require proof of an actual leak—only the fact that protected documents had been transferred to an external service.
Related articles
AI-Driven Mega-Bot Launches Multi-Day Assault on Websites, KillBot Service Holds the Line
An advanced AI-powered bot known as Mega-Bot conducted a sustained attack against websites protected by the KillBot service between October 31 and November 2. The bot combined AI scanning, planning, expansion, and disruption capabilities in an attempt to bring sites offline. KillBot successfully prevented any client websites from going down and eliminated the need for backup restoration. The incident serves as a warning that unprepared sites face similar risks over weekends when administrative response is delayed. The defending service has published a detailed account of the attack timeline and the specific defensive measures that proved effective. Organizations are urged to review their current protections against automated AI-driven threats before the next business day begins.
Anthropic Report: Unreleased Claude Model Builds Working Exploits for Chrome, Safari, Android, Windows and Linux
Anthropic's Frontier Red Team published a report detailing how an unreleased internal version of Claude independently discovered vulnerabilities across major platforms and chained them into working attacks. The model located memory corruption issues in Chrome's V8 engine, bypassed multiple sandbox layers, and produced a one-click exploit that launches Calculator on macOS. Similar chains were built for Safari to steal cross-site data including email contents, for Android to extract photos from a locked Pixel 9 over USB, for Windows to cause denial-of-service via QUIC packets, and for the Linux kernel to achieve remote root via a use-after-free race in the network stack. All findings received CVEs, most have been patched, and the report emphasizes that the model required only high-level human tasking rather than step-by-step guidance. Anthropic notes that such rapid exploit generation shortens the safe window for deploying patches and is therefore restricting access to the model while expanding controlled defensive programs.
HackerSec Launches Pentest Superintelligence Using Orchestrated Frontier AI Models
HackerSec has introduced Pentest Superintelligence, a new offensive cybersecurity methodology that orchestrates multiple high-capacity frontier AI models within a single pentest operation. This builds on the company's earlier Pentest AI-First and Pentest AI-Native approaches by requiring at least two frontier models coordinated through a proprietary runtime. The Yaga autonomous agent serves as the core platform, using a custom harness to integrate models from OpenAI, Anthropic, and xAI while preserving operational context from reconnaissance through exploitation. In internal YagaBench evaluations, the six-model orchestrated setup achieved 98 percent resolution of black-box scenarios compared to 40.5 percent for the best single model. All testing remains within authorized scopes with human oversight for result validation. The development shifts industry focus from merely adding AI to tools toward proving effective multi-model coordination and verifiable impact.
Taming the LLM Dragon: Corporate AI Gateway Architecture Addresses Classic Proxy Shortcomings
Spontaneous adoption of generative AI across enterprises has created shadow AI risks, prompt leaks, and uncontrolled token consumption that standard L7 proxies cannot mitigate. Traditional solutions built on Nginx, Envoy or Kong lack the ability to inspect Server-Sent Events streams, classify sensitive content inside prompts, or enforce token-based quotas in real time. The AI Optimum platform introduces a specialized AI gateway layer that sits between internal consumers and both local inference clusters and external APIs such as GigaChat and YandexGPT. It performs inline PII masking, routes traffic according to data sensitivity, supports OpenAI-compatible endpoints, and maintains detailed audit logs required under 152-FZ. The gateway adds only tens of milliseconds of latency while enabling granular billing, context caching optimization, and protection against runaway agent loops. Subsequent articles in the series will examine real corporate AI spend and further regulatory controls.