Cases · Kind of harm: operations · Themes: data exfiltration
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover Anthropicminor · earliest source 2026-08-05 | security breach | minor | 2026-08-05 |
| Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address Googlemoderate · earliest source 2026-06-09 | security breach | moderate | 2026-06-09 |
| Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |
Showing 1–3 of 3. Or take the JSON.