Cases · Did an AI agent act: yes · Stage of use: in live use · Root cause: adversarial input

What happened	What went wrong	Severity	Earliest source
Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07	security breach	moderate	2026-10-07