Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

DeepSeek

Security incidents tagged DeepSeek. Newest first.

0 DeepSeek incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
631
Longest quiet run: 631 days (Jan 30–Oct 22)
Show 1 older incident

January 2025 1

  • HighDeepSeek leaves ClickHouse database open: chat logs and API keys exposed

    DeepSeek backend (ClickHouse) Patched

    Wiz found two DeepSeek ClickHouse instances open to the internet without authentication. Its query interface allowed arbitrary SQL and exposed a log_stream table with over a million entries, including plaintext chat history, API keys and backend details. DeepSeek locked it down within an hour of being told.