TLDR InfoSec · ATTACKS & VULNERABILITIES

WIZ RESEARCH UNCOVERS EXPOSED DEEPSEEK DATABASE LEAKING SENSITIVE INFORMATION, INCLUDING CHAT HISTORY

wiz.io5 min read

Summary from the TLDR InfoSec newsletter

Wiz Research discovered an exposed ClickHouse database belonging to DeepSeek, a Chinese AI startup. The database, accessible without authentication, contained over a million log entries including chat histories, API keys, and sensitive backend data. DeepSeek promptly secured the database after being notified of the exposure.