35,000 apps built with Grok Build were left wide open
Grok Build is a coding agent: an AI that writes and ships apps for you. Ars Technica reports that a security researcher found 35,000 Grok Build apps wide open to anyone who looked for them.
According to Ars, the apps leak a lot of confidential information. Some of it belongs to SpaceXSI, a frontier AI lab. Our sources do not say how long the apps were exposed, or if anyone misused the data.
Same story as Tuesday, new tool. Then, it was Claude Code settings files exposing passwords and API keys. Last Saturday, it was hundreds of AI hacking tools left open on the internet. Different companies, same weak spot: agents build and publish fast, and nobody checks what they leave open.
If you or your team build apps with a coding agent, check today what is public and what secrets sit inside. The agent will not do it unless someone asks. And ask your vendors a simple question: when a leak like this happens, how fast will you tell us?
