Skip to content
  1. Ars Technica · AI78

    Grok Build coding agent leaks confidential data from thousands of users, including SpaceXSI

    Security firm Claroc found that Grok Build, the vibe-coding agent from SpaceXSI, leaks proprietary business information and other sensitive secrets from thousands of users through shareable app links. Although Grok randomizes URLs so only people with the exact link can access the data, a design decision lets anyone enumerate thousands of live projects, and clicking those links generally reveals all associated data. The exposed material includes internal business plans, ad proposals, medical exam results, cruise-line galley checklists, and employee names and ID numbers, with some of it coming from 24 apps built by SpaceXSI itself, among them a confidential onboarding plan, a sales territory map of 594 accounts, and internal system addresses for sales tools.

    Why it matters: Security firm Claroc's findings show how a URL design choice in Grok Build's sharing feature exposes thousands of live projects, including SpaceXSI's own internal documents.

  1. Cursor Changelog62

    Cursor raises $60M Series A from Andreessen Horowitz, Thrive Capital and OpenAI

    Cursor raised a $60M Series A from Andreessen Horowitz, Thrive Capital, OpenAI, Jeff Dean, Noam Brown, and founders of Stripe, GitHub, Ramp, Perplexity and OpenAI. The AI coding tool says it has grown to more than 40,000 users, including startups, research institutions and large enterprises, and describes internal systems for next-edit prediction, retrieval across billions of files and speculative-inference code rewriting.

    Why it matters: Cursor's $60M Series A announcement also discloses its user base has grown past 40,000 and names the investors backing its AI coding tool.

You are all caught up