Security researchers found a big hole in DeepSeek's security
Briefly

DeepSeek, a popular generative intelligence platform, faces scrutiny due to a significant security vulnerability discovered by Wiz Research. An exposed database containing over a million records, including sensitive user data, system logs, and API keys, was found with minimal effort. Researchers expressed concern that malicious actors could exploit this hole to access deeper systems within DeepSeek. Although the company acted swiftly to secure the database after its findings were disclosed, this incident highlights the importance of robust cybersecurity measures within emerging AI entities.
Usually when we find this kind of exposure, it's in some neglected service that takes us hours to find-hours of scanning. But this time, here it was at the front door.
Wiz Research says it's possible that a nefarious actor could have used this security hole to access other DeepSeek systems, but the company admits it only performed the base minimum assessment.
Read at Engadget
[
|
]