AI Risk Wire

Cases · Stage of use: in live use · Quarter of the earliest source we hold: 2026-Q3 · Where it happened: company that built the AI

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer
Metamoderate · earliest source 2026-09-29
leaked private datamoderate2026-09-29
OpenAI agents leak 53 ChatGPT user images
OpenAImoderate · earliest source 2026-09-25
leaked private datamoderate2026-09-25
SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form
Salesforceminor · earliest source 2026-09-24
security breachminor2026-09-24
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27
security breachmoderate2026-08-27
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAImoderate · earliest source 2026-08-05
security breachmoderate2026-08-05
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23
security breachminor2026-07-23

Showing 1–6 of 6. Or take the JSON.