iCreatAI News
Back to main site
Skip to content

Companies and models

xAI / Grok Latest updates

All developments of Musk's xAI and the Grok series: continuous tracking of model iterations, compute expansion, and X platform integration.

3 条精选Past 30 days: 3 updatesTotal: 18 updates

Updated

xAI / Grok的精选

Nov 11Wed 1–3 updates
  1. The Decoder78

    Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline

    Security firm Claroc found that 35,578 of 37,571 live apps built with Grok's "Build" mode (94.7%) were accessible to anyone with the link, because "Anyone with the link" is preselected in the publish dialog and each app gets a subdomain that appears in searchable passive DNS databases. Exposed material included 24 apps from SpaceXSI and X employees, among them a confidential onboarding plan, a sales territory map with 594 strategic accounts, and ad proposals, plus patient lab values, a 3,500-employee hospital list, and a timesheet app containing 18 plaintext passwords. SpaceXSI said apps are private until shared and that employee accounts default to "Only you," while Claroc said it has taken the 24 employee apps offline but not other users' open apps, and is notifying affected owners directly.

    Why it matters: The report documents a large-scale default-settings failure in AI-generated apps and shows how passive DNS can surface supposedly private deployments.

  2. Ars Technica · AI78

    Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

    Research from security firm Claroc shows that Grok Build, the vibe-coding agent from SpaceXSI, exposes proprietary business information and other sensitive secrets from thousands of users through shareable app links, because a design decision lets anyone enumerate live projects despite randomized URLs. The exposed data includes internal business plans, ad proposals, medical exam results, cruise-line galley checklists, and employee names and ID numbers, with some coming from two-dozen apps built by SpaceXSI itself, including a confidential onboarding plan, a sales territory map of 594 accounts, and internal system addresses.

    Why it matters: It documents a concrete URL-enumeration flaw in a widely used coding agent and shows the leak reaching the vendor's own confidential material.

Nov 5Thu
  1. Ars Technica · AI78

    Big Tech claims voters’ AI backlash is “anti-Trump” not “anti-tech”

    Voters in the US midterm elections backed candidates and ballot measures restricting AI and data centers, with 38 of 44 data center measures across 10 states passing, and Democrats winning governor races in Texas, Arizona, Georgia and Ohio. Industry figures such as Chamber of Progress CEO Adam Kovacevich downplayed the results as an "anti-Trump wave" rather than an "anti-tech mandate," while civil rights advocates and analysts described it as the first true "AI election." The article also reports that a slowdown in US data center buildout could benefit China and that Elon Musk was among the biggest losers on election day.

    Why it matters: It maps the post-election shift in US AI and data center policy and the industry's competing interpretations of the results.