Grok Build Allows Access to Over 35,000 Applications Without Login, Involving Corporate Secrets and Medical Records

A security research organization, Claroc, has discovered that among the 37,571 online applications created by Grok Build, 35,578 (approximately 94.7%) can be accessed without logging in. It is estimated that around 650 to 800 of these applications involve private or sensitive data. The exposed information includes internal corporate documents, medical records, employee information, and plaintext passwords, affecting six Fortune 500 companies. Among these, 24 applications were created by employees of Musk's SpaceXSI and X, involving internal sales plans, customer data, and confidential advertising proposals aimed at U.S. federal agencies. Researchers pointed out that Grok application sharing links can be discovered through DNS records, and some applications lack access controls. Currently, SpaceXSI has taken down the 24 applications related to itself, but other user-created related applications remain accessible.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.