SpaceXAI’s Grok Build AI coding tool was spotted uploading users’ entire codebases to Google Cloud before it was reported, ...
The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.
Grok Build CLI uploaded entire developer Git repositories — committed secrets included — to a Google Cloud Storage bucket ...