A leading cybersecurity firm has issued a stark warning to businesses and organizations about the potential risks associated with using a widely popular app developed by generative AI company DeepSeek. According to NowSecure, the mobile application contains multiple security vulnerabilities that could compromise user data. Despite its initial success, including topping the Apple App Store in January, the app has been found to transmit data unencrypted over the internet and store sensitive information insecurely. The vulnerabilities identified do not affect the AI models themselves but rather the mobile interface through which users access them.

Deep Analysis of Security Risks in DeepSeek's Mobile App

In a comprehensive evaluation conducted on real devices, NowSecure uncovered several critical flaws in the DeepSeek iOS app. One significant issue is the global disabling of Apple’s App Transport Security (ATS), a feature designed to prevent sensitive data from being transmitted over unencrypted channels. With ATS turned off, the app sends unencrypted data over the internet, making it susceptible to man-in-the-middle attacks. Attackers controlling the network can intercept and alter communications between the user and DeepSeek’s servers.

Furthermore, NowSecure discovered that the app caches sensitive information such as usernames and passwords in unencrypted files on the device. This poses a severe risk if an attacker gains physical or remote access to the device. Additionally, the app collects various data points about the network and device it operates on, which can be exploited for tracking and monitoring purposes by malicious actors or data brokers.

The findings have prompted several governments to take action. New York Governor Kathy Hochul recently barred state employees from using DeepSeek’s models on their devices. Similar bans are under consideration at the federal level in the United States, while South Korea, Australia, and Taiwan have already restricted access to DeepSeek’s models on official devices due to concerns over security vulnerabilities and the company’s Chinese origin.

NowSecure emphasizes that while DeepSeek is a high-profile case, these vulnerabilities are not unique to this app. Mobile apps change rapidly and often lack robust protection, presenting a real risk to both companies and consumers.

From a journalist's perspective, this report underscores the importance of rigorous security assessments for mobile applications, especially those gaining rapid popularity. It highlights the need for developers to prioritize security features and for users to remain vigilant about the apps they install. As more organizations adopt AI-driven tools, ensuring data integrity and privacy will become increasingly critical.

This winter, the flu season has surged to alarming levels, posing a significant health challenge across the United States. According to recent data from the Centers for Disease Control and Prevention (CDC), this flu season is among the most severe in over a decade. The latest surveillance report indicates that nearly 8% of medical visits during the first week of February were related to flu-like symptoms, marking the highest percentage since the 2009-2010 season. Flu activity remains elevated nationwide, with hospitalizations and fatalities on the rise. Although other respiratory illnesses like COVID-19 have seen milder impacts this year, influenza continues to dominate as the primary cause of respiratory-related doctor visits.

The current flu season has exhibited an unusual pattern, with two distinct peaks in illness—one occurring from late December to early January, and another more recent surge. Despite the resurgence of social activities post-pandemic, which may have contributed to the spread, the predominant strains of flu remain familiar to healthcare professionals. Most cases are attributed to H1N1 and H3N2 variants of Influenza A, along with some instances of the Victoria lineage of Influenza B. Notably, there have been isolated cases of less common strains, such as H1N2 and H5N1, but these have not shown signs of widespread transmission.

Health officials emphasize the importance of vaccination as a critical preventive measure. Despite the availability of the seasonal flu vaccine, only about 45% of Americans have received it this winter. With flu activity expected to persist until May, experts urge those who haven't been vaccinated to do so promptly. The effectiveness of this year's vaccine is still under evaluation, but getting vaccinated remains one of the best ways to protect against the flu and reduce the risk of serious complications.

The CDC estimates that this winter's flu has already affected over 24 million Americans, leading to 310,000 hospitalizations and at least 13,000 deaths, including 57 children. While these numbers are concerning, they underscore the ongoing need for vigilance and preventive measures. As the flu season progresses, public health authorities continue to monitor trends closely, providing updates and guidance to mitigate the impact of this challenging winter outbreak.