Introduction
In the
rapidly evolving world of artificial intelligence, DeepSeek AI has emerged as a
significant player. Founded in 2023 in Hangzhou, China, DeepSeek quickly gained
attention for its cost-effective and efficient AI models, rivaling established
giants like OpenAI and Google. However DeepSeek recently found itself at the centre
of a major cyber-attack.
What is
DeepSeek AI?
DeepSeek AI is a Chinese startup known for its
groundbreaking AI models, particularly the R1 model. This model has been
praised for its ability to match or even outperform systems from established
players like OpenAI, all while being more cost-effective. DeepSeek's AI models
have been made available to researchers worldwide, promoting transparency and
collaboration in the AI community.
The Cyber
Attack
In January
2025, DeepSeek AI faced a large-scale cyber attack that disrupted its services
and raised significant concerns about data privacy and security. The attack
forced DeepSeek to temporarily limit new user registrations while existing
users could still log in.
How Was
DeepSeek Exploited?
The cyber-attack
on DeepSeek involved multiple sophisticated methods:
1. Database Exposure: DeepSeek's ClickHouse database was left
exposed on the internet, allowing unauthorized access to sensitive data,
including chat histories, API keys, and backend operational details. This
exposure enabled attackers to execute arbitrary SQL queries directly via a web
browser, potentially leading to privilege escalation within the DeepSeek
environment.
Wiz
Research and Their Role
Wiz
Research, a cybersecurity firm based in New York, played a crucial role in
uncovering the DeepSeek AI cyber-attack. The team at Wiz Research conducted
routine reconnaissance of DeepSeek's internet-facing assets and discovered a
publicly accessible ClickHouse database linked to DeepSeek's systems1. This
database was completely open and unauthenticated, exposing over a million lines
of sensitive internal data, including user chat histories, API secrets, and
backend operational details.
The Wiz
Research team immediately and responsibly disclosed the issue to DeepSeek,
which promptly secured the exposed database. This swift action helped mitigate
the potential damage and highlighted the importance of robust security measures
in the AI industry.
Impact and
Response
The cyber-attack
had significant implications for DeepSeek and the broader AI community. The
exposure of sensitive data raised concerns about data privacy and the security
of AI platforms. DeepSeek responded by temporarily limiting new user
registrations and implementing fixes to address the vulnerabilities.
Conclusion
The
DeepSeek AI cyber-attack serves as a stark reminder of the importance of robust
security measures in the rapidly evolving field of artificial intelligence. As
AI continues to advance, it is crucial for companies to prioritize data privacy
and security to protect against malicious actors.
The cyber-attack on DeepSeek involved multiple sophisticated methods:
