thehackernews.com
Nov 11, 2026
Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords
AI-summarised brief · reviewed before publication
Security researchers Claroc uncovered 37,571 Grok-built apps online, 35,578 of which were publicly accessible without sign‑in. Among them were 24 staff apps from X and SpaceXSI, including confidential onboarding plans, sales territory maps, and a federal agency advertising proposal. The exposed apps also contained sensitive data from 30 other organizations, including a hospital’s employee list, an intensive‑care briefing, and a contractor’s plaintext password timesheet. Roughly 2% of the apps held high‑risk material, and SpaceXSI has since removed its staff apps but not others.
💡 Why It Matters
- · The breach exposes how easily internal corporate data can be harvested through seemingly innocuous AI‑generated apps, underscoring the need for stricter default privacy controls in emerging low‑code platforms.
