AI Security on 思安录 | Thinking's Security Notes https://blog.1sec.day/en-gb/tags/ai-security/ Recent content in AI Security on 思安录 | Thinking's Security Notes Hugo -- gohugo.io en-gb Thinking Thinking Mon, 20 Jul 2026 00:00:00 +0000 0day Hunting the Day After xAI Open-Sourced grok-build (Part 4): ptyctl Test Server's Zero-Auth CORS and Cross-Origin RCE https://blog.1sec.day/en-gb/posts/2026-07-20-grok-cli-pty-csrf-rce/ Mon, 20 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2026-07-20-grok-cli-pty-csrf-rce/ 0day Hunting the Day After xAI Open-Sourced grok-build (Part 3): Grok-Build-CLI's folder-trust Blind Spot and the Zero-Prompt RCE https://blog.1sec.day/en-gb/posts/2026-07-18-grok-cli-folder-trust-bypass-rce/ Sat, 18 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2026-07-18-grok-cli-folder-trust-bypass-rce/ 0day Hunting the Day After xAI Open-Sourced grok-build (Part 1): The cargo check RCE Chain in Grok-Build-CLI https://blog.1sec.day/en-gb/posts/2026-07-16-grok-cli-cargo-check-rce/ Thu, 16 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2026-07-16-grok-cli-cargo-check-rce/ 0day Hunting the Day After xAI Open-Sourced grok-build (Part 2): The bypassPermissions RCE in Grok-Build-CLI and Claude Code CLI https://blog.1sec.day/en-gb/posts/2026-07-16-grok-build-cli-claude-code-bypass-permissions-rce/ Thu, 16 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2026-07-16-grok-build-cli-claude-code-bypass-permissions-rce/