Cyber security company has accused DeepSeek, the Chinese AI startup that recently swept the IT world, of inadvertently exposing private information online. Wiz, a company located in New York, claims to have identified the flaw that led to it and said that more than a million lines of data, including user chat logs and program keys, were left exposed.
According to a blog post by Wiz, a DeepSeek database is openly available online and gives users complete control over database functions, including access to internal data.
“The Wiz Research team set out to assess its external security posture and identify any potential vulnerabilities. Within minutes, we found a publicly accessible ClickHouse database linked to DeepSeek, completely open and unauthenticated, exposing sensitive data,” the company claimed.
However, DeepSeek reacted swiftly to the alarm and protected the data in less than an hour, according to Wiz CTO Ami Luttwak.
“They took it down in less than an hour. But this was so simple to find we believe we’re not the only ones who found it,” Luttwak said, as per media.
What data was publicly accessible
More than a million lines of log streams containing extremely sensitive data are exposed.
“This database contained a significant volume of chat history, backend data and sensitive information, including log streams, API Secrets, and operational details,” it added.
This event follows DeepSeek’s quick ascent to prominence in the AI industry. The DeepSeek AI Assistant from the startup has been so popular that it has surpassed even OpenAI’s ChatGPT in terms of App Store downloads.
The company’s ability to provide similar performance to its US competitors at a far lesser cost has been credited with this accomplishment. As a result, US equities lost almost $1 trillion on Monday, January 27.
It surpassed US competitor ChatGPT in terms of downloads from the Apple App Store by Monday.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream formerly known as CIO News LinkedIn Account | The Mainstream formerly known as CIO News Facebook | The Mainstream formerly known as CIO News Youtube | The Mainstream formerly known as CIO News Twitter
About us:
The Mainstream formerly known as CIO News is a premier platform dedicated to delivering latest news, updates, and insights from the tech industry. With its strong foundation of intellectual property and thought leadership, the platform is well-positioned to stay ahead of the curve and lead conversations about how technology shapes our world. From its early days as CIO News to its rebranding as The Mainstream on November 28, 2024, it has been expanding its global reach, targeting key markets in the Middle East & Africa, ASEAN, the USA, and the UK. The Mainstream is a vision to put technology at the center of every conversation, inspiring professionals and organizations to embrace the future of tech.
