Jan 29, 2025
2 new incidents, 0 with updates.
Started
- ClosedPatched
Apple Multiple Products: Multiple Products Use-After-Free Vulnerability
Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges. Added to CISA KEV on 2025-01-29.
Apple Multiple ProductsClosed Jan 29, 2025
- ClosedPatched
DeepSeek leaves ClickHouse database open: chat logs and API keys exposed
Wiz found two DeepSeek ClickHouse instances open to the internet without authentication. Its query interface allowed arbitrary SQL and exposed a log_stream table with over a million entries, including plaintext chat history, API keys and backend details. DeepSeek locked it down within an hour of being told.
DeepSeek backend (ClickHouse)Closed Jan 29, 2025
