AI Risk Wire

Corrections

A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON

744 changes to 213 cases; the latest was on 2026-10-25.

Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2

Showing the 9 changes to this case. All changes

DateCaseWhat changedBy
2026-10-25AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
LR-2026-0090 · version 12 → 13
Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25
What was changed: citations, notes on gaps, confidence grades, system provider
Srini Iyer
2026-10-23AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
LR-2026-0090 · version 11 → 12
Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record.
What was changed: notes on gaps, severity, why this severity
Srini Iyer
2026-10-23AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
LR-2026-0090 · version 10 → 11
Corrected by Srini Iyer, approved 2026-10-22: citations to sentences about a different event were removed.
What was changed: citations, notes on gaps
Srini Iyer
2026-10-23AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
LR-2026-0090 · version 9 → 10
Corrected by Srini Iyer, approved 2026-10-22: duplicate of another record, merged.Srini Iyer
2026-10-22AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
LR-2026-0090 · version 8 → 9
Severity reason did not fit its quote or the record.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-22AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
LR-2026-0090 · version 7 → 8
A judgement inferred by us that no source states was cleared.
What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more
Srini Iyer
2026-10-18AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
LR-2026-0090 · version 6 → 7
Severity reason printed the whole rubric.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-11AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
LR-2026-0090 · version 5 → 6
Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred.
What was changed: failed control, citations, notes on gaps, confidence grades
Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11
Automatic rebuild
2026-09-30AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
LR-2026-0090 · version 4 → 5
Rebuilt from its cited sources on 2026-09-29.
What was changed: country, the evidence, industry, shared exposure and 26 more
Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29
Automatic rebuild

Showing 1–9 of 9. Or take the JSON.