A New York-based cybersecurity firm, Wiz, has uncovered a critical security lapse at DeepSeek, a rising Chinese AI startup, revealing a cache of sensitive data openly accessible on the internet.
According to a report published by Wiz, the exposed data included over a million lines of log entries, digital software keys, backend details, and user chat history from DeepSeek’s AI assistant. The firm’s researchers found that DeepSeek had inadvertently left an unsecured ClickHouse database accessible online, raising significant security concerns for enterprises and governments globally.
Read more…
Source: CSO Online News
Related:
- DIANA, NATO’s innovation accelerator, doubles the size of its transatlantic network
March 14, 2024
On Thursday (14 March 2024), NATO’s Defence Innovation Accelerator for the North Atlantic (DIANA) announced a major expansion of its transatlantic network of accelerator sites and test centres. DIANA’s network will now comprise 23 accelerator sites (up from 11) and 182 test centres (up from 90) in 28 Allied countries, augmenting DIANA’s capacity to support innovators ...
- EU passes landmark AI act, paving the way for greater AI regulation
March 13, 2024
The European Parliament has passed its long awaited AI act that it hopes will provide the legal infrastructure for regulating artificial intelligence. While AI has contributed massively to increases in productivity and has resulted in major innovations in critical industries such as science and healthcare, many fear that the speed of its development may be outstripping ...
- How AI Is Transforming Audit, Risk, and Compliance
March 11, 2024
Over the past decade, audit, risk, and compliance functions have undertaken digital transformation to align and optimize efforts to help their organizations become more resilient and sustainable. At the same time, these transformations must serve the second purpose of helping to reduce the administrative burden and manual tasks historically plaguing audit, risk, and compliance teams with ...
- 20 million Cutout.Pro AI service users hit by massive data breach
March 2, 2024
AI-powered photo and video editing platform Cutout.Pro has become the latest victim to what has turned out to be a pretty sizeable data breach. Personal information relating to as many as 20 million users, including email addresses, hashed and salted passwords, IP addresses, and names has been exposed, prompting significant privacy and security concerns. Read more… Source: MSN ...
- China to accelerate integration of cybersecurity and AI to deal with risks
March 1, 2024
China’s cybersecurity technology ranks in the “top tier” globally, and in the realm of security and defense it can now stand on par with the US, Qi Xiangdong, chairman of Qi An Xin Technology Group, told the Global Times on Friday. However, there remains a gap between China and some developed countries such as the US ...
- Here Come the AI Worms
March 1, 2024
In a demonstration of the risks of connected, autonomous AI ecosystems, a group of researchers have created one of what they claim are the first generative AI worms—which can spread from one system to another, potentially stealing data or deploying malware in the process. “It basically means that now you have the ability to conduct or ...