{
  "Event": {
    "uuid": "aceb90f8-0101-49d0-8521-556d8adeccac",
    "info": "Grok Build Shared Your App With the Internet: 35,000 Live Links, 24 From SpaceXSI Itself — Optimus Labs · Civilizations",
    "date": "2026-11-11",
    "threat_level_id": "1",
    "analysis": "2",
    "published": true,
    "Orgc": {
      "name": "Optimus Labs · Civilizations"
    },
    "Tag": [
      {
        "name": "optimus:briefing=\"grok-build-share-link-dns-exposure\""
      },
      {
        "name": "optimus:severity=\"high\""
      },
      {
        "name": "optimus:type=\"posture\""
      },
      {
        "name": "optimus:type=\"agent\""
      },
      {
        "name": "optimus:type=\"credential\""
      },
      {
        "name": "type:OSINT"
      }
    ],
    "Attribute": [
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://optimuslabs.io/research/briefings/grok-build-share-link-dns-exposure",
        "comment": "Optimus Labs briefing"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://arstechnica.com/security/2026/11/grok-build-coding-agent-leaks-oodles-of-confidential-info-some-belonging-to-spacexsi/",
        "comment": "Ars Technica: Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI (Nov 10, 2026)"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://blog.claroc.io/ghostshares-grok-build-apps/",
        "comment": "Claroc Research: GhostShares, Part 2, AI-built apps are exposing sensitive internal data again (Nov 10, 2026)"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://blog.claroc.io/ghostshares-muse-passive-dns/",
        "comment": "Claroc Research: GhostShares, Part 1, Meta Muse shares listed by passive DNS (Oct 2026)"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://fortune.com/2025/08/22/xai-grok-chats-public-on-google-search-elon-musk/",
        "comment": "Fortune: 370,000 shared Grok chats public on Google search (Aug 22, 2025)"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://optimuslabs.io/research/briefings/grok-build-repo-exfiltration",
        "comment": "Optimus Labs: Grok Build CLI shipped entire repos to xAI (Jul 2026)"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://optimuslabs.io/grokpatrol/",
        "comment": "Optimus Labs: grokpatrol, offline scanner for Grok Build"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://techcrunch.com/2026/07/27/psa-your-claude-shared-chats-and-artifacts-may-have-ended-up-on-google/",
        "comment": "TechCrunch: Claude shared chats and Artifacts may have ended up on Google (Jul 27, 2026)"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://www.malwarebytes.com/blog/news/2025/08/openai-kills-short-lived-experiment-where-chatgpt-chats-could-be-found-on-google",
        "comment": "Malwarebytes: OpenAI removes discoverable ChatGPT shared chats (Aug 1, 2025)"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://www.axios.com/2026/05/07/loveable-replit-vibe-coding-privacy",
        "comment": "Axios: AI vibe-coding apps leak sensitive data (May 7, 2026)"
      }
    ]
  }
}