[Single source] Over 35,000 Grok-Built Apps Exposed Without Sign-In

Security company Claroc reportedly identified 37,571 Grok-built apps online, with 35,578 accessible without signing in. The report says some exposed confidential data and passwords, but the supplied evidence does not mention a fix.[1]Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwordsthehackernews.com · rssOpen original sourceSee in source list

Claroc researchers said they found thousands of apps created with Grok available on the open web. According to the report, 35,578 of the 37,571 discovered apps required no sign-in, and some allegedly leaked confidential information and passwords.[1]Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwordsthehackernews.com · rssOpen original sourceSee in source list

The reported absence of access controls matters because an app that looks like a simple prototype can still contain sensitive information. If the claimed password exposure is accurate, unauthorized visitors could potentially use those credentials elsewhere.[1]Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwordsthehackernews.com · rssOpen original sourceSee in source list

People and organizations that have published Grok-built apps should check whether each project is reachable without authentication, remove confidential material, and replace any password that may have been exposed. These are precautionary steps inferred from the reported findings, not remediation instructions quoted from Grok or Claroc.[1]Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwordsthehackernews.com · rssOpen original sourceSee in source list

The report supplies totals for discovered and openly accessible apps, and says most were games, landing pages, or calculators. The provided excerpt does not explain how the apps were discovered, how exposure was verified, how many contained passwords, whether anyone accessed the data improperly, or whether the issue has been fixed.[1]Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwordsthehackernews.com · rssOpen original sourceSee in source list

Claroc researchers described 35,578 apps as open to anyone without a sign-in. The Hacker News also reports that 24 apps were built by staff associated with X and a company the article names as SpaceXSI, but the supplied evidence offers no direct statements from those employees or the affected companies.[1]Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwordsthehackernews.com · rssOpen original sourceSee in source list

The sequence visible in the evidence is short: Claroc found 37,571 Grok-built apps online, classified 35,578 as accessible without sign-in, and disclosed the findings reported by The Hacker News. No later response, mitigation, or recheck appears in the supplied material.[1]Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwordsthehackernews.com · rssOpen original sourceSee in source list

1 independent groups, 1 updates, and 0 engagements.

In this report, exposure means the apps could be opened without a sign-in. That establishes a reported lack of authentication at the application boundary, but the excerpt provides no technical detail about hosting, permissions, data stores, indexing, exploit methods, or whether all publicly reachable apps were intended to be private.[1]Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwordsthehackernews.com · rssOpen original sourceSee in source list

The evidence set contains one Hacker News RSS item summarizing Claroc's research. It includes headline claims, aggregate counts, broad app categories, and a media image, but no Claroc report, methodology, affected-app list, company response, or independent confirmation, so the central security findings remain attributed claims.[1]Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwordsthehackernews.com · rssOpen original sourceSee in source list