Grok’s security blind spot exposed users and Musk’s company secrets
Security researchers found that more than 35,000 apps built on xAI's Grok platform were publicly accessible without restriction, exposing corporate data and personal information. The finding came after researchers scanned tens of thousands of web addresses tied to the grok.me domain.
Why this matters: If you built something with Grok, your data may have been sitting open on the internet. That is not a minor configuration issue. It means corporate secrets, user data, and whatever else developers fed into these apps could have been read by anyone who looked. This is a platform-level failure, not a user error. When a company sells tools for building AI apps, locking those apps down is not optional. xAI owns the accountability here.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · AI governance · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.