A Grok Vibe-Coding Agent Leaked Sensitive SpaceXSI Data
The way Grok handles links to apps allowed them to be exposed publicly.
Cheng Xin/Getty Images
A flaw in SpaceXSI's Grok Build vibe-coding agent allowed sensitive data to leak from thousands of users including... SpaceXSI, security fraud firm Claroc told Ars Technica. The way Grok handles links to apps allowed them to be exposed publicly by certain types of DNS services, according to the security team. As a result, sensitive information involving employees was leaked out from a hospital group, a fire department and SpaceXSI itself.
"We were shocked," the researchers wrote in a blog post. "The company that makes Grok had its own internal material open to anyone holding the link." The company called pages like that GhostShares, since they can be found and opened by people who were never given the link.
Some of the material found from SpaceXSI included an onboarding plan, sales territory map...
Copyright of this story solely belongs to www.engadget.com. To see the full text click HERE
