A passive DNS investigation revealed that 35,578 AI-built applications, primarily from Grok Build, were exposed to the public internet without requiring authentication. These applications, linked to organizations like SpaceXSI and X, contained sensitive data including employee information, healthcare records, and confidential documents. The exposure was exacerbated by access tokens embedded in DNS hostnames and flawed AI-generated authentication logic, allowing unauthorized access and modification of private business records. AI
IMPACT Highlights critical security risks in AI application development and deployment, emphasizing the need for robust access controls and security reviews.
RANK_REASON The cluster details a security vulnerability in an AI application development tool, rather than a core AI model release or research.
Read on Mastodon — mastodon.social →
AI-generated summary · Google Gemini · from 2 sources. How we write summaries →