DeepSeek leaves ClickHouse database open: chat logs and API keys exposed

Teaser from the source

Wiz found two DeepSeek ClickHouse instances open to the internet without authentication. Its query interface allowed arbitrary SQL and exposed a log_stream table with over a million entries, including plaintext chat history, API keys and backend details. DeepSeek locked it down within an hour of being told.

This is the RSS-feed teaser. Read the full article at the original source.