Cases · Who discovered it: an independent researcher or journalist · How the AI agent failed: hijacked by hidden instructions · Severity: moderate
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
| Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
Showing 1–2 of 2. Or take the JSON.