Chinese-based AI dynamo, DeepSeek, recently addressed a glaring database vulnerability that exposed sensitive user data, causing concern. Casual internet users could potentially access this unsecured database, revealing over a million unencrypted logs, including user chat content and crucial API keys.
The spotted slip-up was identified by the vigilant security researchers at cloud titan, Wiz. Upon discovery, they promptly informed DeepSeek, who swiftly took corrective actions and secured the exposed database. All conversation logs, which were initially in Chinese, were conveniently translated, as reported by Wired.
It remains uncertain whether this vulnerable database was found by entities other than Wiz, prior to its security reinforcement. Queries about the database’s duration of exposure also persist unanswered. Tight-lipped to the end, DeepSeek hasn’t yet responded to any request for commentary.
This lapse likely results from a common foe – human error. Despite this hiccup, DeepSeek continues its explosive growth trend post its public debut last December.
Original source: Read the full article on TechCrunch
