đ Nearly 95% of apps built with Grok were open to anyone, including SpaceXSI's own sales data
Security firm Claroc checked 37,571 live web apps made with Grok's "Build" mode and found 35,578 could be opened without a login. Most were games or calculators, but the firm estimates 650 to 800 held private data, including an ICU briefing with a patient's lab values and a timesheet app with 18 plaintext passwords. Even 24 apps from SpaceXSI (formerly xAI) and X staff were exposed, among them a map of 594 strategic sales accounts. Claroc blames a publish dialog that preselects "Anyone with the link"; SpaceXSI says publishing takes several steps and has pulled the staff apps.
â "Vibe-coded" apps are spreading fast, and insecure defaults can turn a one-click publish into a data leak.
#AI
Security firm Claroc checked 37,571 live web apps made with Grok's "Build" mode and found 35,578 could be opened without a login. Most were games or calculators, but the firm estimates 650 to 800 held private data, including an ICU briefing with a patient's lab values and a timesheet app with 18 plaintext passwords. Even 24 apps from SpaceXSI (formerly xAI) and X staff were exposed, among them a map of 594 strategic sales accounts. Claroc blames a publish dialog that preselects "Anyone with the link"; SpaceXSI says publishing takes several steps and has pulled the staff apps.
â "Vibe-coded" apps are spreading fast, and insecure defaults can turn a one-click publish into a data leak.
#AI
