Leak discovered
DeepSeek user requests were freely accessible
US security researchers have discovered a large database on the internet containing sensitive data from the Chinese AI application DeepSeek. As a result, user entries - more than one million data records in total - were openly visible to anyone, it was reported.
Experts from the cloud security company Wiz in New York published a corresponding report. It shows that DeepSeek had published one of its important databases on the internet without protection.
No official point of contact
After discovering the unprotected database, the researchers at Wiz had problems reaching security experts at the Chinese start-up, as there was no official point of contact at DeepSeek for security tips. As a result, the vulnerability was sent to any DeepSeek email addresses and LinkedIn profiles that were found or guessed. According to the Wiz researchers, they have not yet received a response from DeepSeek.
Database now blocked again
However, DeepSeek apparently responded to the information and blocked the database within half an hour. It was then no longer accessible to unauthorized users. It remains unclear whether anyone had previously accessed or downloaded the data.
"They took it down in less than an hour," said Wiz co-founder Ami Luttwak. "But it was so easy to find that we don't think we're the only ones who found it."
Experts generally warn against entrusting sensitive data to artificial intelligence in the cloud. Nevertheless, a number of users use AI to analyze their financial situation, for example, or to have complicated doctor's letters translated into understandable language.
Surprising competition from the Far East
DeepSeek recently caused a stir on the markets with its AI assistant. Within a few days, the application overtook its US competitor ChatGPT in terms of downloads in the Apple App Store, triggering a global sell-off in tech shares.
According to the company, the AI - at a fraction of the development costs - is just as powerful as its western competitors ChatGPT, Gemini & Co. In addition, the program requires significantly less computing power than usual for training and operation.
This article has been automatically translated,
read the original article here.
Kommentare
Willkommen in unserer Community! Eingehende Beiträge werden geprüft und anschließend veröffentlicht. Bitte achten Sie auf Einhaltung unserer Netiquette und AGB. Für ausführliche Diskussionen steht Ihnen ebenso das krone.at-Forum zur Verfügung. Hier können Sie das Community-Team via unserer Melde- und Abhilfestelle kontaktieren.
