Is DeepSeek Safe? A Q&A on the Cybersecurity Risks of the AI Platform

This report outlines multiple active cybersecurity incidents and risks surrounding the DeepSeek AI platform: a DDoS disruption, a publicly exposed ClickHouse database leaking plaintext chats, secret keys and API tokens, discovery of nearly 12,000 live API keys in training data, malicious PyPI packages acting as info-stealers, and extensive phishing/impersonation campaigns; it also highlights model jailbreak vulnerabilities and recommends security best practices and monitoring.