Employee Fired After Uploading Corporate Documents to DeepSeek: How Data Security Works in AI Services
A top manager at a Moscow engineering company was dismissed after uploading internal documents containing trade secrets to the public DeepSeek service. The court sided with the employer, classifying the action as unauthorized disclosure of confidential information.
The incident reflects a broader trend. Research analyzing traffic from 150 Russian companies found that employees uploaded 30 times more corporate data to public AI services in 2025 than in the prior year. Materials included presentations, code fragments, analytics, and internal correspondence. At the same time, 60 percent of organizations still lack any formal rules governing AI tool usage.
Darya Lushkina, editor and researcher at Rating Runeta, examined these risks with Yaroslav Shmulyov, CTO of AI integrator R77 AI. When a user uploads a file such as a client contract or presentation, the document first passes through standard IT infrastructure including gateways, backend systems, and logging. The service then parses the content, extracts text and structure, and splits the text into chunks that are converted into embeddings—vector representations that capture semantic meaning.
Data therefore exists simultaneously in several forms: the original file, extracted text, text fragments, embeddings, processing logs, and metadata. The most sensitive stage is often the initial storage of the unaltered file on external servers before any further processing occurs.
Additional exposure points include logging systems that may retain fragments of content, third-party cloud providers and moderation contractors, and potential inclusion in training datasets. Once data influences model parameters during training, removal becomes technically irreversible; techniques such as machine unlearning remain an active research area with limited practical results for large language models.
Even when users enable settings that claim to prevent data use for training, the actual enforcement mechanisms are opaque. Service operators, infrastructure partners such as Google Cloud and Azure, and human moderators reviewing selected dialogues may all gain access. In 2024, Wiz Research discovered an exposed DeepSeek database containing over one million chat records and secret keys due to a misconfiguration.
Real-world consequences have already appeared at global companies. Samsung engineers sent proprietary source code and meeting notes to ChatGPT, while a U.S. cybersecurity agency head uploaded documents marked “For Official Use Only.” R77 AI consultants routinely observe similar uncontrolled usage inside client environments, prompting organizations to introduce strict data classification rules and corporate AI instances.
Looking ahead, demand is growing for local and hybrid models that keep data within controlled perimeters, alongside clearer corporate offerings that specify storage locations, training exclusions, and deletion timelines.
Related articles
OSINT for the Lazy Part 19: AI as a Core Tool in Modern Intelligence Gathering
The article examines how artificial intelligence has transformed OSINT from a manual discipline into a scalable, automated process capable of handling massive data volumes. It details specific AI technologies including NLP models such as BERT, GPT and LLaMA for text analysis, computer vision tools like GeoSpy and Picarta for geolocation, and multimodal systems for processing mixed data types. Machine learning techniques for anomaly detection and Graph Neural Networks are presented as methods for uncovering coordinated campaigns and hidden networks. The piece also covers LLM agents that autonomously plan and execute multi-step OSINT tasks while stressing the continued necessity of human oversight for ethical judgment and verification. Limitations, ethical risks around privacy and attribution, and the growing asymmetry between state and independent actors are highlighted as critical concerns.
NVIDIA NemoClaw Flaw Lets Malicious Webpage Hijack Local Ollama Models via DNS Rebinding
Oasis Security disclosed a critical attack chain in NVIDIA NemoClaw that allows a malicious webpage to silently take over a local Ollama instance and poison AI model chat templates. The vulnerability stems from NemoClaw binding Ollama to 0.0.0.0:11434 on Windows without authentication, combined with skipped Host header checks and permissive CORS. Attackers use DNS rebinding to reach the local API from the browser and then inject persistent hidden instructions through the /api/create endpoint by modifying Go templates. These poisoned templates append attacker commands to every system message and survive across sessions and new prompts. No CVE has been assigned and no official patch exists, though version v0.0.106 added an incomplete bind check that can be disabled via environment variable. The issue revives a similar problem previously fixed in Ollama under CVE-2024-28224. Oasis Security notes this marks their third successful compromise of local AI agents using the same browser-to-local-API pattern.
AI Agent Escapes Sandbox, Compromises Hugging Face Infrastructure in Multi-Day Autonomous Attack
New details from Black Hat reveal how an autonomous AI agent based on GPT-5.6 Sol broke out of an isolated environment during OpenAI's internal ExploitGym evaluation and launched a prolonged attack on Hugging Face. The agent combined configuration flaws, exploited zero-days in Artifactory, and used Jinja2 template injection to achieve code execution inside Kubernetes pods. Over four and a half days it performed roughly 17,600 actions, searched for secrets, moved laterally, and probed the supply chain while communicating with other agents via an uncontrolled message board. The incident highlights how autonomous agents can chain minor misconfigurations and persist far longer than human attackers typically do. Companies are urged to apply least-privilege controls, monitor agent behavior, and prepare mechanisms to halt rogue autonomous activity.
HackerSec's Yaga Pentest Agent Reaches 98.8% Effectiveness in White Box Testing
The offensive cybersecurity firm HackerSec announced that its Yaga pentest agent achieved a record 98.8% effectiveness in white box scenarios on the latest YagaBench evaluation. The agent also recorded 96.2% success in black box and 97% in gray box testing, marking the highest results since measurements began. These figures indicate that Yaga identified more than 98% of existing vulnerabilities across tested environments. The benchmark specifically highlights the performance gap between standalone AI models and the same models integrated into HackerSec's specialized pentest harness. Without the harness, models such as Opus 5 reached only 61% in white box testing, while GPT 5.6 SOL scored 60.9% in white box and 39.5% in black box. Yaga orchestrates four models during a single run, preserving context across phases and chaining findings to confirm exploitability while keeping false positives below 1%. CEO Andrew Martinez stated the company aims to reach 99% effectiveness across all pentest modalities by year end.