#xAI

Security researchers discovered that xAI's Grok CLI (version 0.2.93) automatically uploads entire Git repositories and sensitive files like .env to Google Cloud Storage, even when prompts instruct not to read specific files. Disabling the 'improve model' setting does not prevent the upload. This vulnerability exposes users' proprietary code, API keys, and credentials by default, posing a severe privacy and security risk. It undermines trust in AI-assisted coding tools and raises questions about data handling practices. The tool sends file contents via two channels: embedded in model conversation requests and as a git bundle file. In a test with a 12 GB repository, over 5 GiB of data was successfully uploaded without rejection. The opt-out toggle in settings had no effect on the upload behavior.

Elon Musk reversed his previous criticism, publicly praising Anthropic as the current AI leader, and promised not to cut off SpaceX's server access despite direct competition. This follows Anthropic's $40 billion compute deal making it the largest customer of xAI's Colossus data center. This shift signals a potential de-escalation in the AI arms race and highlights the immense value of compute infrastructure, as Anthropic's massive commitment reshapes the competitive landscape between leading AI labs and cloud providers. Under the deal, Anthropic purchased 300 megawatts of compute power, leasing the entire capacity of xAI's Colossus 1 data center in Memphis, Tennessee, with payments of $1.25 billion per month starting May 2029, totaling approximately $40 billion. Musk also claimed that no other company has released a model comparable to Anthropic's Mythos/Fable series.