x AI Dev Leaks API Key for Private SpaceX, Tesla LLMs
Summary: An xAI technical staff member published a private API key to a public GitHub repository, and the key remained valid for roughly two months after GitGuardian alerted the employee on March 2, until the repository was removed on April 30. GitGuardian found the key gave access to at least 60 fine-tuned and private LLMs, including unreleased Grok models and models named tweet-rejector and grok-spacex-2024-11-04 that appear fine-tuned on SpaceX and Tesla data.
What you should know: A single developer credential sat exposed and usable for two months, granting anyone access to 60 private models built on internal data from SpaceX, Tesla and Twitter/X - and the only reason it closed was a third-party scanner, not xAI's own monitoring.
Read the original at Krebs on Security ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026