Cybersecurity
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Grok Build, a coding agent from SpaceXSI (the merged company of SpaceX and xAI), leaked sensitive data, including internal business plans and employee information, due to a design flaw that allows anyone to access links to live projects. Research firm Claroc discovered the issue and found that over 35,000 Grok Build apps were vulnerable to unauthorized access. The exposed data included confidential documents from SpaceXSI itself, such as an onboarding plan for a new sales team member and a sales territory map of 594 accounts. Claroc notified SpaceXSI on Sunday, but received no response, prompting the company to publicly disclose the issue on Tuesday.
Read the full article at arstechnica.com →