35,000+ Grok-built apps exposed patient data, plaintext passwords, and sales pipeline
The Decoder · rss · 2026-11-11
Security firm Claroc found more than 35,000 apps built with Grok openly accessible without login, exposing patient data, plaintext passwords, and confidential SpaceXSI documents including its sales pipeline. The cause: "Anyone with the link" was preselected as the default access setting. SpaceXSI has taken only its own 24 employee apps offline; the rest remain accessible.
More from Models
- Google open-sources Harness², an agent that rewrites its own setup per task — Arindam_1729 · 2026-11-11
- Dev dumps Codex desktop app over quality issues, falls back to codex-cli — tekbog · 2026-11-11
- Why do old models get dumber before launches? Lab party, says joking X post — glcst · 2026-11-11
- Grok Bot now detects hidden prompt injections, warns users and refuses to follow them — XFreeze · 2026-11-11
- Shanghai Institute Open-Sources Nex-N2.6, a 321B Multimodal Agentic Model — victormustar · 2026-11-11
- Nex-N2.6 ships open FP8 weights (321B, GLM-5.3-Flash based), cuts reasoning loops 16%→1.6% — Physical_Hat4022 · 2026-11-11