How to use DeepSeek both privately and securely | Kaspersky official blog
Source Kaspersky Security Blog
Description
We explain how to configure privacy settings in DeepSeek, how to use the chatbot securely, and how to deploy it locally.
Impact
For European organizations, the primary impact of this threat relates to potential breaches of confidentiality and privacy, especially given stringent data protection laws such as GDPR. Misconfiguration of DeepSeek’s privacy settings or reliance on cloud-based deployments could result in sensitive data being transmitted to or stored on external servers, increasing the risk of data leakage or unauthorized access. This could lead to regulatory penalties, reputational damage, and loss of customer trust. Additionally, organizations using AI chatbots for internal or customer-facing applications might face operational disruptions if privacy concerns lead to suspension or restriction of these tools. The impact is particularly relevant for sectors handling sensitive personal data, such as healthcare, finance, and public services. However, since no active exploits are known, the immediate risk is moderate, focusing on preventing future incidents through proper configuration and deployment strategies.
Defensive guidance
European organizations should deploy DeepSeek locally whenever possible to ensure data remains within their controlled environments, minimizing exposure to external threats. They must rigorously configure privacy settings according to the guidance provided by Kaspersky, including disabling any telemetry or data sharing features that are not essential. Regular audits and monitoring of chatbot interactions should be conducted to detect any inadvertent data leakage. User training is critical to ensure that personnel understand the privacy implications and proper use of the tool. Organizations should also integrate DeepSeek deployment with existing data protection policies and incident response plans. Where local deployment is not feasible, encryption of data in transit and at rest, combined with strict access controls, should be enforced. Finally, staying updated with vendor patches and security advisories is essential, even though no patches are currently listed, to address any future vulnerabilities promptly.
References
Community reviews
Related threats
- Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux KernelMediumVulnerability
- Acronis Patches Exploited Vulnerability in cPanel Backup PluginExploitedVulnerability
- Acronis warns of actively exploited flaw in its cPanel backup pluginHighVulnerability
- UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilitiesMalware
- ZDI-26-568: Linux Kernel Net Scheduler Race Condition Local Privilege Escalation VulnerabilityHighVulnerability