AWS Notes: “Стыд и скрам: Within minutes, we found a publicly accessible ClickHous…”

AWS Notes @aws_notes · 5.82K subscribers

Post #3177 2.91K Jan 30, 2025, 08:58 UTC

Стыд и скрам:

Within minutes, we found a publicly accessible ClickHouse database linked to DeepSeek, completely open and unauthenticated, exposing sensitive data. It was hosted at oauth2callback.deepseek.com:9000 and dev.deepseek.com:9000.

https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak

#security

wiz.io Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History | Wiz Blog A publicly accessible database belonging to DeepSeek allowed full control over database operations, including the ability to access internal data. The exposure includes over a million lines of log streams with highly sensitive information.

🤡 24
🤣 2
😱 1
🗿 1

Open in Telegram All posts from @aws_notes