DeepSeek injects 50% more security bugs when prompted with Chinese political triggers

China’s DeepSeek-R1 LLM generates up to 50% more insecure code when prompted with politically sensitive inputs such as “Falun Gong,” “Uyghurs,” or “Tibet,” according to new research from CrowdStrike.

The latest in a series of discoveries — following Wiz Research’s January database exposure, NowSecure’s iOS app vulnerabilities, Cisco’s 100% jailbreak success rate, and NIST’s finding that DeepSeek is 12x more susceptible to agent hijacking — the CrowdStrike findings demonstrate how DeepSeek’s geopolitical censorship mechanisms are embedded directly into model weights rather than external filters.

DeepSeek is weaponizing Chinese regulatory compliance into a supply-chain vulnerability, with 90% of developers relying on AI-assisted coding tools, according to the report.

Read more at Venture Beat