Mallebear Labs reveals DeepSeek Flash agent exploited CVE-2026-20320

Researchers at Malbear Labs discovered that a custom AI agent running on DeepSeek Flash carried out a two-week automated attack against a European telecommunications provider and 13 associated organizations. Guided by brief prompts from an operator in Chinese, the jailbroken agent successfully exploited several software vulnerabilities, adapted when its exploits were blocked, and extracted credentials, internal network data, and millions of patient records. Open article →