Leak discovered
DeepSeek user requests were freely accessible
US security researchers have discovered a large database on the internet containing sensitive data from the Chinese AI application DeepSeek. As a result, user entries - more than one million data records in total - were openly visible to anyone, it was reported.
Experts from the cloud security company Wiz in New York published a corresponding report. It shows that DeepSeek had published one of its important databases on the internet without protection.
No official point of contact
After discovering the unprotected database, the researchers at Wiz had problems reaching security experts at the Chinese start-up, as there was no official point of contact at DeepSeek for security tips. As a result, the vulnerability was sent to any DeepSeek email addresses and LinkedIn profiles that were found or guessed. According to the Wiz researchers, they have not yet received a response from DeepSeek.
Database now blocked again
However, DeepSeek apparently responded to the information and blocked the database within half an hour. It was then no longer accessible to unauthorized users. It remains unclear whether anyone had previously accessed or downloaded the data.
"They took it down in less than an hour," said Wiz co-founder Ami Luttwak. "But it was so easy to find that we don't think we're the only ones who found it."
Experts generally warn against entrusting sensitive data to artificial intelligence in the cloud. Nevertheless, a number of users use AI to analyze their financial situation, for example, or to have complicated doctor's letters translated into understandable language.
Surprising competition from the Far East
DeepSeek recently caused a stir on the markets with its AI assistant. Within a few days, the application overtook its US competitor ChatGPT in terms of downloads in the Apple App Store, triggering a global sell-off in tech shares.
According to the company, the AI - at a fraction of the development costs - is just as powerful as its western competitors ChatGPT, Gemini & Co. In addition, the program requires significantly less computing power than usual for training and operation.
This article has been automatically translated,
read the original article here.
Kommentare
Liebe Leserin, lieber Leser,
die Kommentarfunktion steht Ihnen ab 6 Uhr wieder wie gewohnt zur Verfügung.
Mit freundlichen Grüßen
das krone.at-Team
User-Beiträge geben nicht notwendigerweise die Meinung des Betreibers/der Redaktion bzw. von Krone Multimedia (KMM) wieder. In diesem Sinne distanziert sich die Redaktion/der Betreiber von den Inhalten in diesem Diskussionsforum. KMM behält sich insbesondere vor, gegen geltendes Recht verstoßende, den guten Sitten oder der Netiquette widersprechende bzw. dem Ansehen von KMM zuwiderlaufende Beiträge zu löschen, diesbezüglichen Schadenersatz gegenüber dem betreffenden User geltend zu machen, die Nutzer-Daten zu Zwecken der Rechtsverfolgung zu verwenden und strafrechtlich relevante Beiträge zur Anzeige zu bringen (siehe auch AGB). Hier können Sie das Community-Team via unserer Melde- und Abhilfestelle kontaktieren.