The exposed database allowed complete control over database operations, including the ability to access internal data.
It was hosted at oauth2callback.deepseek.com:9000 and dev.deepseek.com:9000, the cybersecuritywrotein its blog post.
They took it down in less than an hour, Luttwak said.
But this was so simple to find we believe were not the only ones who found it.
DeepSeek has currently limited user registrations because of anongoing cyberattack.
Just 2 days back, another cybersecurity firm was able tojailbreak Deepseek.
DeepSeek has yet to comment on the issue.
source: www.techworm.net
