Media report · AI-ASSISTED BRIEF
Grok Build Coding Agent Exposed Confidential Data via Enumerable Share Links
Report publication · YYSI publication
According to Ars Technica, Security firm Claroc reported that Grok Build, the vibe-coding agent from SpaceXSI, exposed confidential data through shareable app links. Because random URL words sit left of the domain, passive DNS services could enumerate thousands of live projects, revealing business plans, employee records and medical data. Claroc found 24 SpaceXSI-built apps among the exposed projects; SpaceXSI removed those links after Ars Technica inquired.
Source & context
arstechnica.com · Read the original source ↗
This AI-assisted brief attributes information to the linked media report. It is not an official announcement or independent YYSI reporting. Consult the original report and its evidence.