Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords
2026-11-11T13:24:00Z•5b2d32d0817323e03f180b1ce921c2f193b2ad2322b13ebd9d15b19417f8c8f3
CVE-2026-105133CVE-2026-105134CVE-2026-111760CVE-2026-123218CVE-2026-125350CVE-2026-20320AI securityCISA KEVactive exploitationauthentication bypassbrowser securitycertificate authority compromisecloud securitycredential theftcyber espionagedata exposureenterprise patchingindustrial control systemsmalwarephishingremote code executionsupply-chain securityzero-day
What happened
The feed reports widespread, high-impact cybersecurity activity, including actively exploited vulnerabilities in enterprise software, browsers, communications platforms, and cloud infrastructure; AI-agent and model supply-chain risks; exposed applications and credentials; ransomware-like data theft and unauthorized cloud spending; certificate authority compromise; espionage campaigns; and destructive attacks on industrial control systems. Multiple incidents involve remote code execution, authentication bypass, sensitive-data exposure, and exploitation listed by CISA KEV. Organizations should8?
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 5b2d32d0817323e03f180b1ce921c2f193b2ad2322b13ebd9d15b19417f8c8f3
- Enrichment time
- 2026-11-11T13:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.