Grok chat history leak: zero-click indirect prompt injection
Why the open web links it
Demonstrates a zero-click attack that leaks user data from xAI's Grok through an indirect prompt injection.
Linked by 6 independent sites, 3 of them widely read in the 2026-10 crawl of the open web, including theregister.com, thehackernews.com, moonlock.com, cyberupdates365.com, simplysecuregroup.com.