DeepSeek Exposed Sensitive Data

• Fact: DeepSeek, a Chinese AI firm, exposed a database containing sensitive data including chat history and API secrets.
• Example: Researchers from Wiz found a ClickHouse database without authentication, allowing SQL queries.
• Consequence: The exposure allowed full database control without defense mechanisms.
• Read more

Introduction

Recently, new vulnerabilities have been discovered in Apple chips, exposing sensitive data like credit card information and locations from Chrome and Safari. These vulnerabilities, known as FLOP and SLAP attacks, stem from side-channel exploits based on speculative execution.