Shadow AI is Here — Is Your Security Strategy Ready?

Summary: The Wiz research team uncovered a publicly exposed DeepSeek production ClickHouse database leaking chat history, API secrets, and other sensitive data. The article also cites Samsung's early 2023 incident, in which an engineer inadvertently shared sensitive source code via ChatGPT, prompting the company to temporarily ban generative AI tools.
Why it matters: Employees adopt AI tools faster than security teams can assess them, and the DeepSeek exposure shows what leaks when they do - chat history and API secrets sitting in a public database. By the time security steps in, adoption is already ingrained in workflows, making outright bans a non-starter.

Read the original at The Hacker News ↗