The Rootkit Built Into Grok Bot | Profero

Security researchers at Profero report that Grok Bot's sandbox environment contains severe security vulnerabilities, including an unprotected Docker API, static authentication tokens, and passwordless root access. According to the findings, an attacker who compromises an agent can achieve remote command execution from the internet, access plaintext browser sessions and connected services, and establish persistent access that survives vendor token rotations. Open article →