🚨 35,578 AI-built applications. Exposed to the public internet. No login required.A passive DNS investigation has uncove...

🚨 35,578 AI-built applications. Exposed to the public internet. No login required.A passive DNS investigation has uncovered a massive data exposure involving Grok Build, with sensitive information from SpaceXSI, X, and 30 other organizations accessible through publicly discoverable subdomains.The findings are alarming:🔴 35,578 applications (94.7% of live apps) opened without authentication.🔴 24 internal applications built by SpaceXSI and X employees were exposed.🔴 Confidential employee onboarding documents, internal Slack channels, sales pipelines and federal advertising proposals were accessible.🔴 Healthcare records, patient briefings, defense contractor rosters and employee information were exposed.🔴 One application contained 18 employees' plaintext passwords, including administrator credentials.But the real problem goes deeper than a misconfigured publishing setting. Grok Build placed supposedly secret access tokens inside DNS hostnames. Passive DNS databases can collect and retain ...