BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
| AI-generated 'Xiaohai' teen persona used to sell products to older women via fabricated sob storiesmoderate · earliest source 2026-10-20 | produced harmful content | moderate | 2026-10-20 |
| Deepfake investment-scam ads impersonating Nigerian public figures on Facebookmoderate · earliest source 2026-10-08 | other | moderate | 2026-10-08 |
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |