Claroc Finds Grok-Built Apps Exposed, SpaceXSI Takes Employee Apps Offline

1. 18:08
   QbitAIPicks

   Grok Build Apps Exposed Sensitive Data Through Public Links, Report Says

   QbitAI reports that security firm Claroc found more than 35,000 Grok Build apps accessible without login, with an estimated 650–800 containing private data. Examples included SpaceXSI and X sales information, Tesla employee performance and bonus details, ICU patient records, and plaintext passwords. Claroc said passive DNS databases could reveal app URLs; Ars Technica reported that 24 apps created by SpaceXSI and X employees had been taken down by publication time.

1. 20:53
   The DecoderPicks

   Grok-Built Apps Exposed Patient Data, Plaintext Passwords, and SpaceXSI Sales Data

   Security firm Claroc found that 35,578 of 37,571 Grok-built apps it checked were accessible to anyone with the link, including apps exposing patient records, plaintext passwords, and SpaceXSI sales data. Claroc said about one in ten open apps contained sensitive or personal information and estimated 650 to 800 apps held private data. SpaceXSI took 24 employee apps offline; Claroc is notifying other affected owners.

2. 05:12
   Ars Technica · AI

   Grok Build Coding Agent Exposes Thousands of User Projects

   Security firm Claroc found that Grok Build, a coding agent from SpaceXSI, exposed thousands of users’ live projects through share links. The leaked data included internal business plans, medical exam results, employee names and ID numbers, and material from 24 apps built by SpaceXSI itself, including a confidential onboarding plan and a sales territory map of 594 accounts.

Trends compare the same continuously observed participants, which may cover fewer sources than current heat. Point or click to inspect hourly heat, or use left and right arrow keys.