InfoSecBulletin Cybersecurity for mankind
New York-based cybersecurity firm Wiz has discovered sensitive data from the Chinese AI startup DeepSeek that was accidentally exposed on the internet.
10 New Vulnerabilities Discovered in MediaTek Chipsets
Qualcomm’s March 2025 Security Bulletin Highlights Major Vulns
Cyberattack detected at Polish space agency, minister says
Nearly 12,000 API Keys and Passwords Found in Public Datasets
Android Phone’s Unlocked Using Cellebrite’s Zero-day Exploit
DragonForce Ransomware Targets Saudi Company, 6TB Data Stolen
Microsoft Uncovers Hackers Selling Illegal Azure AI Access
By 2025, India’s First Semiconductor Chip to be ready
CVE-2025-20111
Cisco Warns Vulns in Nexus 3000 and 9000 Series Switches
CVE-2025-0475 & CVE-2025-0555
GitLab’s High-Risk Flaw, Patch Now Urgently!
In a blog post, Wiz reported that scans of DeepSeek’s infrastructure revealed over a million unsecured data lines. This data contained digital software keys and chat logs that recorded user prompts sent to the company’s free AI assistant.
Wiz’s chief technology officer said DeepSeek quickly secured the data after his firm alerted them.
“They took it down in less than an hour,” Ami Luttwak said. “But this was so simple to find we believe we’re not the only ones who found it.”
DeepSeek did not immediately return a message seeking comment.
DeepSeek’s rapid success with its AI assistant has excited China while worrying the U.S. The company’s ability to compete with OpenAI at a lower cost raises concerns about the profitability of American AI giants like Nvidia and Microsoft.
By Monday, it surpassed ChatGPT in downloads on Apple’s App Store, leading to a global decline in tech stocks.
