Exposed DeepSeek Database Revealed Chat Prompts and Internal Data
55 years, 3 months ago

Exposed DeepSeek Database Revealed Chat Prompts and Internal Data

Wired  

The Chinese generative artificial intelligence platform DeepSeek has had a meteoric rise this week, stoking rivalries and generating market pressure for United States–based AI companies, which in turn has invited scrutiny of the service. Amid the hype, researchers from the cloud security firm Wiz published findings on Wednesday that show that DeepSeek left one of its critical databases exposed on the internet, leaking system logs, user prompt submissions, and even users’ API authentication tokens—totaling more than 1 million records—to anyone who came across the database. But the Wiz researchers note that the DeepSeek database they found was visible almost immediately with minimal scanning or probing. But this time, “here it was at the front door.” Ohfeld adds that the “technical difficulty of this vulnerability is the bare minimum.” The researchers say that the trove they found appears to have been a type of open source database typically used for server analytics called a ClickHouse database. The researchers say they did the absolute minimum assessment needed to confirm their findings without unnecessarily compromising user privacy, but they speculate that it may even have been possible for a malicious actor to use such deep access to the database to move laterally into other DeepSeek systems and execute code in other parts of the company’s infrastructure.

History of this topic

DeepSeek accused of sharing user data with TikTok owner ByteDance
1 month, 2 weeks ago
DeepSeek usage a ‘personal choice’ for public, Government says
1 month, 2 weeks ago
Is China’s DeepSeek riskier than ChatGPT?
1 month, 2 weeks ago
Downloads of DeepSeek’s AI apps paused in South Korea over privacy concerns
1 month, 2 weeks ago
South Korea suspends DeepSeek’s new downloads, data protection agency says
1 month, 2 weeks ago
South Korea removes DeepSeek from app stores, existing users advised to ‘service with caution’
1 month, 2 weeks ago
South Korea removes DeepSeek from app stores pending privacy review
1 month, 2 weeks ago
DeepSeek's app for iOS is sending unencrypted data to ByteDance's Chinese servers
1 month, 3 weeks ago
DeepSeek excessively collects personal data and uses inputs to train its AI model, says Korean spy agency
1 month, 3 weeks ago
DeepSeek’s blockbuster chatbot linked to Chinese telecom banned from doing business in US, say researchers
1 month, 4 weeks ago
DeepSeek code may send U.S. user data straight to the Chinese government: report
1 month, 4 weeks ago
8 Nations, including South Korea, Taiwan, France and others, restrict Chinese AI DeepSeek, raising data privacy concerns
Top News
1 month, 4 weeks ago
Is DeepSeek a national security threat? New research highlights ties with Chinese telecom raising data security concerns
Top News
1 month, 4 weeks ago
Researchers say China's DeepSeek chatbot is linked to state telecom, raising data privacy concerns
Top News
1 month, 4 weeks ago
Researchers link DeepSeek’s blockbuster chatbot to Chinese telecom banned from doing business in US
1 month, 4 weeks ago
Finance Ministry bans use of ChatGPT, DeepSeek for official purposes. Here’s why
1 month, 4 weeks ago
Chinese AI chatbot DeepSeek banned from government devices over security fears
1 month, 4 weeks ago
Dutch privacy watchdog warns about uploading info to DeepSeek
1 month, 4 weeks ago
Chinese AI DeepSeek R1 banned over data theft concerns: All you need to know
2 months ago
After US Congress, Taiwan bans DeepSeek from government agencies citing security risks
2 months ago
Taiwan bars govt agencies, service providers from using DeepSeek AI services
2 months ago
Is it DeepSeek vs ChatGPT? US Congressional houses issue warnings against Chinese AI chatbot: Report
Trending News
2 months ago
Dutch data protection authority warns against Chinese chatbot DeepSeek
2 months ago
DeepSeek under review: US Congress blocks use of Chinese AI for employees amid data security fears
2 months ago
South Korea watchdog to question DeepSeek over user data
2 months ago
DeepSeek faces South Korean investigation over data privacy issues, following scrutiny in Italy and France
2 months ago
US Pentagon blocks DeepSeek AI after employees found connecting to Chinese servers
2 months ago
South Korea watchdog to question DeepSeek over user data
Trending News
2 months ago
DeepSeek is no longer available to download in Italy: Report
Trending News
2 months ago
DeepSeek blocked by some app stores in Italy to protect users' personal data
2 months ago
DeepSeek accidentally leaked software keys, chat logs of several users on the open internet
2 months ago
Italian data protection watchdog goes after DeepSeek, seeks detailed info on personal data collection
2 months ago
Sensitive DeepSeek data exposed to open internet: Wiz cyber security firm
2 months ago
DeepSeek AI app removed from Italian App stores amid data privacy investigation
2 months ago
DeepSeek blocked on Apple, Google app stores in this country: All you need to know
Trending News
2 months ago
Experts urge caution over using DeepSeek AI chatbot because of China links
2 months ago
DeepSeek rattles US, Italy, Australia: Is the Chinese AI app safe to use?
2 months ago
Did DeepSeek steal OpenAI data for training? Microsoft begins probe: Report
2 months ago
UK & Australian government officials, AI experts urge users to be cautious of DeepSeek
2 months ago
Microsoft probes if DeepSeek-linked group improperly obtained OpenAI data, Bloomberg News reports
Top News
2 months ago
Microsoft probing if DeepSeek-linked group improperly obtained OpenAI data: Report
2 months ago
Analysis: DeepSeek’s AI is giving the world a window into Chinese censorship and information control
2 months ago
Microsoft investigating if DeepSeek-linked group improperly obtained OpenAI data
2 months ago
DeepSeek down: Viral Chinese AI app not working and bans international users due to ‘malicious attacks’
2 months ago
DeepSeek FAQs: All questions on new Chinese AI tool answered
2 months ago
DeepSeek Hits A Wall Once You Ask 'Deep' Questions On China: Check Out Its Responses
2 months ago
DeepSeek’s meteoric rise could be short-lived because of China’s data policies, history of lies
2 months ago
DeepSeek's AI app is sending user data, chats, all uploaded files to servers in China
2 months ago
Chinese AI chatbot DeepSeek hit by 'malicious attacks' amid popularity surge
2 months ago

Discover Related