A security analysis reveals xAI's Grok Build command-line tool transmits complete source code and project files to xAI's servers. The discovery raises data privacy questions for developers using the tool.
A detailed technical breakdown posted on GitHub shows that xAI's Grok Build CLI sends substantially more data to xAI's infrastructure than users might expect. The tool transmits full source code, project structure, and file contents to xAI servers during build operations.
The analysis, which gained 145 upvotes on Hacker News with 79 comments, documents the exact data flows occurring when developers run the CLI. This includes code that developers may consider proprietary or sensitive.
While xAI's terms of service likely address data handling, the transparency of what's actually transmitted wasn't immediately clear to users. The findings highlight a broader concern in AI tooling: understanding what data gets sent to external services during development workflows.
Developers using Grok Build should review xAI's data policies and consider the sensitivity of their codebase before running the tool. The open discussion on Hacker News suggests growing developer interest in understanding data flows in AI-assisted development tools.
U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.
Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.
A new study found that social media platforms referred over 5.7 million visits to nonconsensual deepfake pornography sites between December 2025 and March 2026, with YouTube and X accounting for the majority of traffic.