Grok-built apps exposed patient records and SpaceXSI's sales data
AIA security firm, Claroc, found that 35,578 of 37,571 still-online apps built with Grok's Build mode were open to anyone with the link. The default "Anyone with the link" setting, plus app addresses that appear in searchable DNS records, exposed patient records, plaintext passwords, and SpaceXSI's own sales documents.
AIWhy it matters.
The article shows how a default sharing setting and public DNS records exposed sensitive data from over 35,000 Grok-built apps, a risk for any AI app builder.
Loading source posts…
Source details
The Decoder · Jonathan Kemper · the-decoder.comPublished · added here
Original title: Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline