Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
•
YouTube Security VideosRackspace maximizes data center space and compute power with AMD(24.09.2026 um 16:00 Uhr)
•
Podcasts & Audio BriefingsTechLinked: Android Laptops Are Here…(22.09.2026 um 02:45 Uhr)
•
Podcasts & Audio BriefingsTechLinked: They’re Really Doing It…(24.09.2026 um 02:56 Uhr)
••
Podcasts & Audio Briefings9to5Google: Googlebook Hands-On: Android's biggest step in years.(21.09.2026 um 15:00 Uhr)
•
Podcasts & Audio Briefings9to5Google: 30 days with Pixel 11: What we learned.(22.09.2026 um 17:45 Uhr)
••
AI & KI NachrichtenNeil Patel: 300 Reviews at 4.2 Beats 15 at 5.0 #shorts(21.09.2026 um 20:03 Uhr)
•
AI & KI NachrichtenNeil Patel: Google Just Quietly Killed Your Clicks #shorts(22.09.2026 um 20:01 Uhr)
••
YouTube Security VideosRackspace maximizes data center space and compute power with AMD(24.09.2026 um 16:00 Uhr)
•
Podcasts & Audio BriefingsTechLinked: Android Laptops Are Here…(22.09.2026 um 02:45 Uhr)
•
Podcasts & Audio BriefingsTechLinked: They’re Really Doing It…(24.09.2026 um 02:56 Uhr)
••
Podcasts & Audio Briefings9to5Google: Googlebook Hands-On: Android's biggest step in years.(21.09.2026 um 15:00 Uhr)
•
Podcasts & Audio Briefings9to5Google: 30 days with Pixel 11: What we learned.(22.09.2026 um 17:45 Uhr)
••
AI & KI NachrichtenNeil Patel: 300 Reviews at 4.2 Beats 15 at 5.0 #shorts(21.09.2026 um 20:03 Uhr)
•
AI & KI NachrichtenNeil Patel: Google Just Quietly Killed Your Clicks #shorts(22.09.2026 um 20:01 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

DeepSeek Is Running Inside Your Favorite AI Tool – And Nobody Told You

I was debugging a slow response in HuggingChat last Tuesday. Standard stuff Open DevTools, check the Network tab, filter by Fetch/XHR, look at the API responses. And then I saw this right there in the chat UI: agentic with Kimi-K2.6…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I was debugging a slow response in HuggingChat last Tuesday.



Standard stuff Open DevTools, check the Network tab, filter by Fetch/XHR, look at the API responses.



And then I saw this right there in the chat UI:




agentic with Kimi-K2.6 via 🤗 together






HuggingChat showing Kimi-K2.6 model with DevTools open agentic with Kimi-K2.6 via together visible in the chat

HuggingChat showing exactly which model it's using - Kimi-K2.6 via Together AI No hiding This is what transparency looks like.



I stared at the screen for a second Kimi-K2.6 That's a model from Moonshot AI a Chinese AI company Not something HuggingChat built from scratch Just a third-party API call, right there in plain sight.



But here's the thing HuggingChat was being honest They show you the model name They show you the inference provider Right in the UI.



Then I checked some of the other tools I use every day.



That's when things got uncomfortable.









What the API Traffic Actually Shows



DeepSeek, Kimi, Qwen Chinese open-source models are everywhere right now In my case, HuggingChat revealed it was using Kimi-K2.6 Other tools hide DeepSeek or similar models in their API calls while their marketing pages talk about something very different.



I found multiple tools with proprietary claims that were actually calling DeepSeek, Qwen, and Kimi APIs The pattern was consistent: marketing said one thing, network traffic said another.



One tool's website says "frontier intelligence built from scratch" The API response says kimi-k2p5-rl-0317.



Another claims "self-developed AI, fully in-house" Network traffic shows deepseek-coder-v2.



A third markets itself as "next-generation proprietary model" DevTools reveals qwen-2.5-72b.



They had us in the first half.









Why This Actually Matters



Before you say "who cares what model is under the hood, if it works it works" let me push back.



It matters for your decision-making You're choosing between tools partly based on the claim that one has a better, proprietary model If they're both calling the same third-party API, that's not a differentiator. You're paying a premium for a wrapper.



It matters for your data If a tool says your data never leaves our servers but the API traffic shows calls to api.together.ai or api.moonshot.cn those are different servers In different countries. Possibly under different data protection laws This matters for enterprise use especially.



It matters for trust. A tool that misrepresents what model it's using makes you wonder what else in the product description is marketing fiction Pricing Data handling Capabilities All of it.



It matters for debugging When something gives weird or unexpected output, knowing the actual model helps enormously Why is this responding strangely to Chinese language inputs? is a lot easier to debug if you know it's routing to a Chinese model behind the scenes.









HuggingChat Is Actually the Good Example Here



I want to be clear about something: the screenshot that started all this HuggingChat showing Kimi-K2.6 via together is HuggingChat doing the right thing.



They show you the model They show you the inference provider They put it right in the chat UI No DevTools required No API snooping.



That's not hard to implement It's a design choice.



Showing the model says: we trust you to know what you're using



Not showing the model says: we'd rather you didn't think about this



HuggingChat should be the baseline The uncomfortable reality is that most tools don't meet it.









How to Check Your Own Tools (5 Minutes)



You don't need anything special. Just a browser and 5 minutes



Step 1: Open your AI tool of choice in Chrome or Edge



Step 2: Press F12 to open DevTools → go to the Network tab



Step 3: Filter by Fetch/XHR



Step 4: Ask something simple — "Explain Python in one line"



Step 5: Click the API request that fires. Look at the Response tab



Look for:




  • A model field in the JSON response

  • Third-party domains in the request URL: together.ai, openai.com, anthropic.com, moonshot.cn, deepseek.com

  • Model IDs in the payload — they look like kimi-k2p5-rl-0317 or deepseek-coder-v2 or qwen-2.5-72b-instruct



That's it. Five minutes. You'll know exactly what you're actually talking to.









The Broader Pattern



AI tools are in an awkward middle phase right now The underlying models are mostly commodities everyone is calling the same APIs from OpenAI Anthropic Together AI Moonshot Mistral DeepSeek The real differentiation is supposed to be in the product layer: the UX the context handling the integrations the workflow.



But some companies are still trying to compete on the model itself And when they can't build one, some just... say they did Put "proprietary" in the marketing Hope no one opens DevTools.



Most people don't check. You're busy. The tool works. Move on.



But it works and it's honest with you about what it is are two different things And the second one matters more than the industry currently acknowledges.



The tools that are transparent about their models tend to be transparent about other things too pricing, limitations, data handling Honesty compounds. So does opacity.









One Question Before You Go



Open DevTools right now on the AI tool you use most.



Check the Network tab Find the model name in the API response.



Is it what you expected?



I'll share exactly what I found in my daily tools in the comments —including the ones that surprised me.



Your turn. 👇

SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - DeepSeek Is Running Inside Your Favorite AI Tool – And Nobody Told You
id: d67839c0-5de2-4752-977c-3a689727da95
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "DeepSeek Is Running Inside You" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich DeepSeek Is Running Inside Your Favorite.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten DeepSeek Is Running Inside Your Favorite AI Tool – And Nobody Told You

Thematisch verwandte Begriffe: DeepSeek, Running, Inside, Your · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97360 | HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary fil…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel • Rechts: nächster Artikel • unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger • Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick