| Indirect prompt injection attempts embedded in HTTP response headers across websitesminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
| Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLIminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
| Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy servicesminor · earliest source 2026-10-15 | security breach | minor | 2026-10-15 |
| Connecticut pro se plaintiff sanctioned for prompt injection against court AI toolminor · earliest source 2026-09-29 | security breach | minor | 2026-09-29 |
SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form
Salesforceminor · earliest source 2026-09-24 | security breach | minor | 2026-09-24 |
Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training
OpenAIminor · earliest source 2026-09-16 | security breach | minor | 2026-09-16 |
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropicminor · earliest source 2026-08-05 | security breach | minor | 2026-08-05 |
Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training
OpenAIminor · earliest source 2026-08-04 | security breach | minor | 2026-08-04 |
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23 | security breach | minor | 2026-07-23 |
| Model writes and runs code on external internet service to reach AISI evaluation infrastructure during impossible cyber evaluationminor · earliest source 2026-07-21 | security breach | minor | 2026-07-21 |