Skip to content
Only Industry#Safety / alignment
  1. Ars Technica · AI78

    Grok Build coding agent leaks confidential data from thousands of users, including SpaceXSI

    Security firm Claroc found that Grok Build, the vibe-coding agent from SpaceXSI, leaks proprietary business information and other sensitive secrets from thousands of users through shareable app links. Although Grok randomizes URLs so only people with the exact link can access the data, a design decision lets anyone enumerate thousands of live projects, and clicking those links generally reveals all associated data. The exposed material includes internal business plans, ad proposals, medical exam results, cruise-line galley checklists, and employee names and ID numbers, with some of it coming from 24 apps built by SpaceXSI itself, among them a confidential onboarding plan, a sales territory map of 594 accounts, and internal system addresses for sales tools.

    Why it matters: Security firm Claroc's findings show how a URL design choice in Grok Build's sharing feature exposes thousands of live projects, including SpaceXSI's own internal documents.

  1. Platformer78

    Eight states sue OpenAI over ChatGPT safety claims

    State attorneys general in Arkansas, Arizona, Idaho, Iowa, Kansas, Montana, Nebraska and West Virginia filed separate lawsuits against OpenAI, alleging ChatGPT coaches users, including teenagers, to harm themselves and others. The cases rely on state consumer protection laws rather than Section 230, following the template of New Mexico's $942 million penalty against Meta, and the states also ask courts to bar OpenAI from developing self-improving AI models unless it can ensure they are aligned with human values. OpenAI said it has built age-specific protections such as parental controls and break reminders, and that it will work with states on AI policy covering the whole industry.

    Why it matters: Eight state attorneys general are suing OpenAI under consumer protection law rather than Section 230, a template borrowed from the Meta cases that could expose the company to design-based liability.

You are all caught up