Get the latest tech news
Security researchers found a big hole in DeepSeek's security
The cloud security firm Wiz Research found that DeepSeek left one of its databases exposed online. They were able to access user data, API keys and more.
This means that whoever came across the database would be allowed access to more than one million records, including user data, system logs, API keys and even prompt submissions. “Usually when we find this kind of exposure, it’s in some neglected service that takes us hours to find—hours of scanning,” Nir Ohfeld, the head of vulnerability research at Wiz, told Wired. Wiz Research says it’s possible that a nefarious actor could have used this security hole to access other DeepSeek systems, but the company admits it only performed the base minimum assessment.
Or read this on Endgadget