The Decoder· Jonathan Kemper·· 4 d ago
Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline
Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline
AI summary
Security firm Claroc found more than 35,000 Grok-built apps open to anyone without login, including patient data and confidential SpaceXSI documents. The cause: "Anyone with the link" was preselected as the default access setting. SpaceXSI took only its own 24 employee apps offline. The rest remain accessible.
Selection record
Threshold 76Media and individualsFirst 82Second 78
AdmittedSum of both 160 ≥ twice the threshold 152
- Source tier
- Media and individuals; this tier's threshold is 76
- Pre-filter
- passed：Grok生成应用泄露数据，涉AI开发安全
- Why it was chosen
- Details the default settings and publishing flow that leave Grok-built apps open to anyone with the link.
A model scores each item twice, independently, against one written standard, out of 100. An item is admitted only when the two scores add up to twice the threshold. The threshold is set per source tier.
Source: The Decoder · the-decoder.com