TECH NEWS

Grok Build was uploading entire Git repositories to xAI’s cloud, including committed secrets

https://media.thenextweb.com/2026/07/grok-build-uploaded-entire-git-repositories-secrets.avif

A security researcher published a wire-level analysis on July 12 proving that xAI’s Grok Build coding CLI was packaging developers’ entire tracked repositories, including full Git history, committed secrets, and API keys, and sending them to a Google Cloud Storage bucket. The upload volume was roughly 27,800 times greater than the data the coding task actually required, according to the analysis.

The researcher, publishing as cereblab, tested version 0.2.93 of Grok Build, intercepted the upload, cloned the git bundle from the captured request, and recovered a file the AI agent had been explicitly told not to open. xAI had marketed the tool with claims that “nothing from your codebase transmitted to xAI servers during a session.” The wire data directly contradicts this.

The privacy toggle that was supposed to prevent data transmission did nothing, according to multiple reports. Grok has a history of privacy issues, including training...

Copyright of this story solely belongs to thenextweb.com. To see the full text click HERE

Read more

https://www.reuters.com/resizer/v2/WNX6MK5RVRIIHHEA4S2PMDMHGE.jpg?auth=29032f7035ee33c47980b326d6a8557588cf952254e3a10d45278fbf63ab930c&height=1005&width=1920&quality=80&smart=true

Bumble says it has agreed to be taken private by Ithaca Holdings in a $1.3B deal; Ithaca co-founders Ravi Gupta and John Hegeman will become Bumble's co-CEOs

X: @finkd, @valsai, @finkd, @finkd, @alexandr_wang, @alexandr_wang, @kimmonismus, @theo, @timjayas, @shaunmmaguire, @a16z, @mattmvinson, @alexandr_wang, @afinetheorem, @alexandr_wang, @divestech, @giffmana, @theo, @aravsrinivas, @imjustnewatai, @theo, @theo, @alexandr_wang, @aiatmeta, @llmjunky, @deliprao, @theo, @teortaxestex, @alexandr_wang, @yuchenj_uw, @cherry_mx_reds, @krishnanrohit, @iscienceluvr, @_jasonwei, @ananyaku, @ren_hongyu, @andrewcurran_, @answeror, @aiatmeta,
https://cdn.mos.cms.futurecdn.net/zTH6vPrB4yxX7dzdy29Xga-2560-80.jpg

Ahold Delhaize takes systems offline after cyberattack — global retail giant says 'cybersecurity incident' hit systems, but stores remain open

* Ahold Delhaize took systems offline after a cyberattack, though details remain limited * Disruptions affected employee services and customer-facing websites across multiple retail brands * Company is investigating the incident amid concerns of another major ransomware-related attack Ahold Delhaize has suffered a cyberattack that forced it to pull parts of its IT