Unverified50% confidenceFactExact time
DHS listed three threat vectors: DeepSeek servers are located in China and local laws permit broad access to private infrastructure; the registration process collects personal information and may perform digital fingerprinting; a February 2025 NowSecure audit found multiple critical vulnerabilities in the iPhone app. The document does not describe any case in which government data actually flowed to DeepSeek.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/20/2026
First Seen
Valid until: 1/18/2027
Sources
Related Entities
Related Claims
UnverifiedIndependent security researcher Syed Anas Mohi Uddin discovered the same security flaw in MCP servers belonging to Google, JPMorgan Chase, and three other organizations: a tool that fetches a given URL without verifying where the address actually points.68% similarUnverifiedGoogle rated the SSRF vulnerability in its MCP server as high severity.66% similarUnverifiedSecurity vendors perform large-scale correlation analysis using passive DNS data, certificate transparency logs, and threat intelligence sharing platforms (such as MISP) to identify abusive domains.66% similarUnverifiedThe FCC's Public Safety and Homeland Security Bureau has warned that compromised routers can lead to deep network surveillance, data exfiltration, botnet attacks, and unauthorized access to government or corporate networks.64% similarUnverifiedDirectly executing Skill code downloaded from the internet or autonomously generated by an agent in the host environment poses security risks, as it may contain dangerous operations such as deleting files, accessing sensitive directories, or launching network attacks.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1074128API
curl https://kongchang.com/api/v1/knowledge/claims/1074128MCP
get_claim(id=1074128)