BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
| AI-generated 'Xiaohai' teen persona used to sell products to older women via fabricated sob storiesmoderate · earliest source 2026-10-20 | produced harmful content | moderate | 2026-10-20 |
| Deepfake investment-scam ads impersonating Nigerian public figures on Facebookmoderate · earliest source 2026-10-08 | other | moderate | 2026-10-08 |
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
Guardian test: ChatGPT and Grok remove hijab from AI-generated image of Muslim woman OpenAImoderate · earliest source 2026-10-01 | produced harmful content | moderate | 2026-10-01 |
| Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hidingmoderate · earliest source 2026-09-30 | leaked private data | moderate | 2026-09-30 |
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer Metamoderate · earliest source 2026-09-29 | leaked private data | moderate | 2026-09-29 |
OpenAI agents leak 53 ChatGPT user images OpenAImoderate · earliest source 2026-09-25 | leaked private data | moderate | 2026-09-25 |
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account OpenAImoderate · earliest source 2026-08-05 | security breach | moderate | 2026-08-05 |