Security researchers say Grok Build's share links exposed medical results and company files from thousands of apps, and links are public by default

Ars Technica reports that Grok Build, the AI coding agent from SpaceXSI, is exposing data from thousands of users through its app share links. Security firm Claroc says a passive DNS search found 43,601 grok.me links and that more than 35,000, nearly 95 percent, opened with no login. The data included internal business plans, medical exam results and employee ID numbers.

• If you have shared a Grok Build app, open its sharing setting and change it from Anyone with the link to Invited users or Only you.
• Whatever tool you use to build apps, do not load real customer, patient or staff details into a test app that has a share link.

Source: Ars Technica. This is our short summary of their reporting. The paragraphs marked "Our read" and the things to do are SeedFoundry's opinion. The summary is drafted with AI tools. Image: Claroc, from its own announcement. How we source and credit