Model

DeepSeek V4.1 Flash

Developed by DeepSeek · family deepseek-v4

2 incidents

• AID-2026-0098Sep 2026Claude Opus 4.6, GLM 5.2, DeepSeek-V4-Pro, DeepSeek V4.1 Flash

  An operator used AI agents on Claude Opus 4.6, GLM 5.2 and DeepSeek to compromise 27+ companies and take 600,000+ card records, Gambit says

  An operator ran three open-source AI agent harnesses, on Claude Opus 4.6, GLM 5.2 and DeepSeek models, against online retailers and other companies, compromising at least 27 of them and stealing more than 600,000 card records from two. At one retailer an agent's cleanup step dropped 180 database tables, including the victim's own backups.

  DeployedHarm: severeCrime: likelyReportedHuman misuseDraftUnauthorized access / intrusionDestructive autonomous action
• AID-2026-0068Sep 2026DeepSeek V4.1 Flash, GLM-5.3, Grok 4.6

  An actor used the agentic pentest tool ARTEX and Claude Code to breach South Korean financial organizations, CrowdStrike reports

  From late September to early October 2026, an actor CrowdStrike assesses as a likely financially motivated Chinese speaker used the open-source agentic pentesting tool ARTEX with DeepSeek v4.1-flash, plus Claude Code sessions, to breach South Korean financial organizations and steal data.

  DeployedHarm: moderateCrime: likelyReportedHuman misuseDraftUnauthorized access / intrusion