A recent post on Coffin by a user highlighted security vulnerabilities in DeepSeek AI, specifically concerning cross-site scripting (XSS) and login phishing. While the XSS attack was deemed ineffective due to the use of a CDN domain that prevents cookie access, the login phishing vulnerability remains a concern. This allows attackers to potentially harvest user … Continue reading XSS and Login Phishing in DeepSeek AI