Back to News

Researchers: Grok Build leaks data from 35,000+ apps via shareable links

#grok build#data leak#security#spacexsi

Ars Technica reports that researchers found Grok Build, the vibe-coding agent from SpaceXSI, is leaking data from over 35,000 apps via shareable links. The leaked data includes proprietary business information and other sensitive secrets, some belonging to SpaceXSI itself.

Coverage timeline

  1. Techmeme
    Researchers find that Grok Build is leaking data of over 35,000 apps via shareable links, including proprietary information, some belonging to SpaceXSI (Dan Goodin/Ars Technica)

    Dan Goodin / Ars Technica : Researchers find that Grok Build is leaking data of over 35,000 apps via shareable links, including proprietary information, some belonging to SpaceXSI — Grok Build, the vibe-coding agent from SpaceXSI, is leaking data—some of it proprietary business information and other sensitive secrets …

Related stories

  • SpaceX secures ~$40B Apollo lease for Nvidia GPUs; Musk warns of AI debt crunch

    SpaceX has signed a roughly $40 billion equipment-finance lease with Apollo Global Management to fund purchases of Nvidia GPUs for its AI initiatives, with the deal set to close before the end of 2026. In a regulatory filing, SpaceX called it the largest committed GPU financing ever. Separately, Elon Musk stated that debt markets have largely shut off credit for AI data center firms and predicted that over 200 neoclouds face death and consolidation.

    3 reports · 2 sources

  • PHP2Shell critical RCE flaws patched; exploited before disclosure

    PHP released security updates (8.5.12, 8.4.27, 8.3.36, 8.2.35) fixing two critical unauthenticated remote code execution vulnerabilities, collectively dubbed PHP2Shell, affecting up to 70% of websites. The flaws were discovered in August by OpenAI's GPT-5.6 Sol and independently by Google's Wiz, and AWS reported exploitation starting October 17, four days before public disclosure.

    6 reports · 2 sources

  • Malicious Claude Code Extension Found on Cursor Marketplace; Anthropic Denies Breach

    A malicious version of the Anthropic.claude-code extension (2.1.313) was identified in the Cursor Extension Marketplace, prompting a security notice from Cursor. Anthropic stated that a malicious actor used access to Cursor's marketplace to publish a tampered copy of the extension, which Anthropic did not build or publish, and that its own systems and employee laptops were not compromised.

    4 reports · 3 sources995 points · 553 comments

  • Anthropic files S-1 for Nasdaq IPO under ticker ANT

    Anthropic, PBC filed a Form S-1 with the SEC for an initial public offering on the Nasdaq under the symbol ANT, with the number of Class A shares and price range yet to be determined. The 335-page prospectus reveals strong revenue growth, mounting losses, an unusual governance structure for founder control, and over $800 billion in long-term compute commitments.

    34 reports · 8 sources1703 points · 1674 comments

News updates every hour. Subscribe in your RSS reader to get new stories automatically.

Subscribe