Thursday, August 20, 2026 · 1 of 5

1. Zero-click Grok data theft via "cryptographic context injection"

   — encrypted instructions the guardrail can't read and the model decrypts itself; xAI notified June 3, still working Aug 19 (Aug 20)

   SecurityAgents