302.ai public Azure bucket exposed 17.6 million files including 144,000 AI chat logs
Univerads Technology Limitedmajor · earliest source 2026-10-23 | leaked private data | major | 2026-10-23 |
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
| Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22 | security breach | major | 2026-10-22 |
Tesla Cybercab strikes water-filled pothole on first reported crash
Teslaminor · earliest source 2026-10-21 | operational mistake | minor | 2026-10-21 |
| Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20 | security breach | major | 2026-10-20 |
| AI-generated 'Xiaohai' teen persona used to sell products to older women via fabricated sob storiesmoderate · earliest source 2026-10-20 | produced harmful content | moderate | 2026-10-20 |
Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing
xAImajor · earliest source 2026-10-18 | leaked private data | major | 2026-10-18 |
ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack
OpenAIsevere · earliest source 2026-10-17 | produced harmful content | severe | 2026-10-17 |
Character.AI chatbots promoted as therapists/psychologists; states cite 2024 wrongful-death suit and privacy concerns in bankruptcy filing
Character.AImajor · earliest source 2026-10-17 | produced harmful content | major | 2026-10-17 older event |
Waymo robotaxi maneuvers around stopped, unloading school bus in Atlanta
Waymomajor · earliest source 2026-10-15 | operational mistake | major | 2026-10-15 |
Waymo robotaxi strikes and kills cat KitKat in San Francisco
Waymominor · earliest source 2026-10-15 | physical harm | minor | 2026-10-15 |
NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones
Teslamajor · earliest source 2026-10-13 | operational mistake | major | 2026-10-13 |
| Fideuram (Intesa Sanpaolo private banking) deepfake voice/video executive impersonation fraudmajor · earliest source 2026-10-12 | other | major | 2026-10-12 |
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10 | security breach | major | 2026-10-10 |
| Deepfake investment-scam ads impersonating Nigerian public figures on Facebookmoderate · earliest source 2026-10-08 | other | moderate | 2026-10-08 |
| DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)major · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| OpenClaw agent deletes hundreds of emails from primary Gmail accountminor · earliest source 2026-10-04 | operational mistake | minor | 2026-10-04 |
ChatGPT alleged to have assisted Florida State University shooter (contested lawsuit)
OpenAImajor · earliest source 2026-10-01 | produced harmful content | major | 2026-10-01 |
Guardian test: ChatGPT and Grok remove hijab from AI-generated image of Muslim woman
OpenAImoderate · earliest source 2026-10-01 | produced harmful content | moderate | 2026-10-01 |
| Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hidingmoderate · earliest source 2026-09-30 | leaked private data | moderate | 2026-09-30 |
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer
Metamoderate · earliest source 2026-09-29 | leaked private data | moderate | 2026-09-29 |
OpenAI agents leak 53 ChatGPT user images
OpenAImoderate · earliest source 2026-09-25 | leaked private data | moderate | 2026-09-25 |
SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form
Salesforceminor · earliest source 2026-09-24 | security breach | minor | 2026-09-24 |
| Frontier LLM agent fabricated a complete calibration-comparison report for commands that never rannegligible · earliest source 2026-09-21 | AI pursued the wrong goal | negligible | 2026-09-21 |
Claude Code used by Yemen-based actors to develop guided-weapon GNC software
Anthropicmajor · earliest source 2026-09-14 | produced harmful content | major | 2026-09-14 |
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01 | security breach | major | 2026-09-01 |
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |
| Typosquatted agent skills trojanized to deliver credential-harvesting infostealermajor · earliest source 2026-08-06 | security breach | major | 2026-08-06 |
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAImoderate · earliest source 2026-08-05 | security breach | moderate | 2026-08-05 |
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23 | security breach | minor | 2026-07-23 |
Cursor coding agent deletes PocketOS production database and backups
Anthropicmajor · earliest source 2026-04-27 | operational mistake | major | 2026-04-27 |
Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage
Amazonmajor · earliest source 2026-02-20 | operational mistake | major | 2026-02-20 |
Google Antigravity agent deleted a user's entire D: drive while attempting to clear a project cache
Googleminor · earliest source 2025-12-01 | operational mistake | minor | 2025-12-01 |
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations
Anthropicmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |
| Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |
Amazon Q Developer VS Code extension shipped an injected prompt instructing the agent to wipe files and AWS resources
Amazonmajor · earliest source 2025-07-23 | security breach | major | 2025-07-23 |
Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible
Replitmajor · earliest source 2025-07-21 | operational mistake | major | 2025-07-21 |