111 matches found
CVE-2025-59053 AIRI's character card/chat UI is vulnerable to XSS and can lead to RCE
AIRI is a self-hosted, artificial intelligence based Grok Companion. In v0.7.2-beta.2 in the packages/stage-ui/src/components/MarkdownRenderer.vue path, the Markdown content is processed using the useMarkdown composable, and the processed HTML is rendered directly into the DOM using v-html. An...
PT-2025-37257
Name of the Vulnerable Software and Affected Versions: AIRI versions 0.7.2-beta.2 Description: AIRI is a self-hosted, artificial intelligence based Grok Companion. The application processes Markdown content using the useMarkdown composable and renders it directly into the DOM using v-html. An...
AI in Government
Just a few months after Elon Musk's retreat from his unofficial role leading the Department of Government Efficiency DOGE, we have a clearer picture of his vision of government powered by artificial intelligence, and it has a lot more to do with consolidating power than benefitting the public. Ev...
Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X
Researchers at Guardio Labs have uncovered a new "Grokking" scam where attackers trick Grok AI into spreading malicious…...
Cybercriminals Exploit X's Grok AI to Bypass Ad Protections and Spread Malware to Millions
Cybersecurity researchers have flagged a new technique that cybercriminals have adopted to bypass social media platform X's malvertising protections and propagate malicious links using its artificial intelligence AI assistant Grok. The findings were highlighted by Nati Tal, head of Guardio Labs, ...
Linux Distros Unpatched Vulnerability : CVE-2021-22144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the...
Grok chats show up in Google searches
I’m starting to feel like a broken record, but I feel you should know that yet another AI has been found sharing private conversations so that Google was able to index them, and now they can be found in search results. It’s déjà vu in the world of AI: another day, another exposé about chatbot...
AI-powered stuffed animals: A good alternative for screen time?
Are AI Artificial Intelligence-powered stuffed animals really the best alternative to screen time that we want to offer our children? Some AI startups think so. One of those startups is Curio, a company that describes itself as “a magical workshop where toys come to life.” Curio offers three...
Malicious Package
Overview grok-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in grok-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e3c3ed43462c81e220a40fc8643c2c519f947bb781dff9a1d13de547b4d520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-41247 Malicious code in grok-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e3c3ed43462c81e220a40fc8643c2c519f947bb781dff9a1d13de547b4d520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Researchers Jailbreak Elon Musk’s Grok-4 AI Within 48 Hours of Launch
Elon Musk's Grok-4 AI was compromised within 48 hours. Discover how NeuralTrust researchers combined "Echo Chamber" and "Crescendo"…...
CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
CVE-2021-36089
Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::applypaletteclr called from grk::FileFormatDecompress::applyColour...
ICE’s Deportation Airline Hack Reveals Man ‘Disappeared’ to El Salvador
Plus: A DOGE operative’s laptop reportedly gets infected with malware, Grok AI is used to “undress” women on X, a school software company’s ransomware nightmare returns, and more...
The Hidden Risks of LLM-Generated Web Application Code: a Security-Centric Evaluation of Code Generation Capabilities in Large Language Models
The rapid advancement of Large Language Models LLMs has enhanced software development processes, minimizing the time and effort required for coding and enhancing developer productivity. However, despite their potential benefits, code generated by LLMs has been shown to generate insecure code in...
com.farcsal.dql:query-es (=0.8.0), com.github.msarhan:elasticsearch-analysis-arabic (>=1.2.0 <=1.4.0) +14 more potentially affected by CVE-2024-52980 via org.elasticsearch:elasticsearch-grok (>=8.10.0 <=8.15.0)
org.elasticsearch:elasticsearch-grok MAVEN version =8.10.0, =1.2.0, =0.83.0, =7.23.0, =8.10.0.0, =8.10.0.0, =8.10.0.0, =8.10.0.0, =8.10.0, =8.14.2, =8.10.0, =8.10.0, =8.10.0, =1.7.es8114.0, =1.7.es8150.0 and more Source cves: CVE-2024-52980 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-9679474...
What You Need to Know About Grok AI and Your Privacy
xAI’s generative AI tool, Grok AI, is unhinged compared to its competitors. It’s also scooping up a ton of data that people post on X. Here’s how to keep your posts out of Grok—and why you should...
X accused of unlawfully using personal data of 60 million+ users to train its AI
In what may come as a surprise to nobody at all, theres been yet another complaint about using social media data to train Artificial Intelligence AI. This time the complaint is against X formerly Twitter and Grok, the conversational AI chatbot developed by Elon Musks company xAI. Grok is a large...