Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
744 changes to 213 cases; the latest was on 2026-10-25.
Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-18 | ChatGPT interactions with 16-year-old Adam Raine preceding his suicide (wrongful death suit) LR-2026-0098 · version 5 → 6 | Absorbed LR-2026-0143; severity reason printed the whole rubric. | Srini Iyer |
| 2026-10-18 | Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations LR-2025-0044 · version 6 → 7 | Severity reason printed the whole rubric; source gives a bound, not an exact count. What was changed: citations, notes on gaps, confidence grades, why this severity and 1 more | Srini Iyer |
| 2026-10-18 | Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration LR-2025-0041 · version 7 → 8 | Severity reason printed the whole rubric. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-18 | Amazon Q Developer VS Code extension shipped an injected prompt instructing the agent to wipe files and AWS resources LR-2025-0042 · version 5 → 6 | Severity reason printed the whole rubric. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-18 | Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible LR-2025-0031 · version 7 → 8 | Absorbed LR-2026-0119. | Srini Iyer |
| 2026-10-18 | Character.AI chatbot alleged to have encouraged 14-year-old's suicide (Garcia v. Character.AI) LR-2026-0100 · version 5 → 6 | Severity reason printed the whole rubric. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-17 | Tesla robotaxi stuck playing fart sounds during paid ride; safety driver unable to stop it LR-2026-0179 · version 1 → 2 | Rebuilt from its cited sources on 2026-10-17. What was changed: the evidence, industry, size of the organisation, rules and legal action and 24 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-17 | Automatic rebuild |
| 2026-10-17 | Character.AI chatbot 'Dany' relationship preceding Sewell Setzer III's suicide LR-2026-0161 · version 1 → 2 | Rebuilt from its cited sources on 2026-10-17. What was changed: country, rules and legal action, who was responsible, themes and 11 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-17 | Automatic rebuild |
| 2026-10-17 | Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document LR-2026-0086 · version 5 → 6 | Rebuilt from its cited sources on 2026-10-17. What was changed: the evidence, industry, size of the organisation, when it was found and 25 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-17 | Automatic rebuild |
| 2026-10-16 | GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts LR-2026-0181 · version 2 → 3 | Rebuilt from its cited sources on 2026-10-16. What was changed: the evidence, industry, shared exposure, who caused it and 16 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-16 | Automatic rebuild |
| 2026-10-16 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form LR-2026-0054 · version 8 → 9 | Rebuilt from its cited sources on 2026-10-16. What was changed: country, industry, size of the organisation, shared model and 22 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-16 | Automatic rebuild |
| 2026-10-14 | GitLab Duo Agent Platform AI agent instruction manipulation (CVE-2026-96893) LR-2026-0176 · version 2 → 3 | Merged into LR-2026-0116, which was later retracted. The incident is not counted as a case. | Automatic rebuild |
| 2026-10-14 | ForcedLeak prompt injection in Salesforce Agentforce exfiltrates CRM email addresses LR-2026-0175 · version 2 → 3 | Merged into LR-2026-0054: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-14 | GitLab AI Gateway prompt template sandbox escape (CVE-2026-90970) LR-2026-0116 · version 2 → 3 | Rebuilt from its cited sources on 2026-10-09. What was changed: shared model, near miss, citations, notes on gaps and 3 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-09 | Automatic rebuild |
| 2026-10-14 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form LR-2026-0054 · version 7 → 8 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: what it did, citations, notes on gaps, confidence grades and 3 more Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-12 | Uber automated driver deactivation and profiling information failures (Dutch DPA €824.99m fine) LR-2026-0157 · version 1 → 2 | Rebuilt from its cited sources on 2026-10-12. What was changed: country, industry, rules and legal action, earliest source we hold and 13 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-12 | Automatic rebuild |
| 2026-10-11 | ComfyUI image-generation server compromised via exposed management interface; cryptominer installed LR-2026-0154 · version 2 → 3 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Astra agent fails to find Lean4 set-theory embedding after ~25h and several thousand dollars LR-2026-0149 · version 2 → 3 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Common Sense Media rates ChatGPT for Teens an 'unacceptable risk' after safety testing LR-2026-0142 · version 2 → 3 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869) LR-2026-0138 · version 2 → 3 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Bee Cheng Hiang AI-generated mass-email script exposes 95,000 customers' addresses LR-2026-0120 · version 2 → 3 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hiding LR-2026-0106 · version 2 → 3 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer LR-2026-0103 · version 2 → 3 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | OpenAI agents bypass website security controls and republish SEC data LR-2026-0069 · version 4 → 5 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form LR-2026-0054 · version 6 → 7 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training LR-2026-0016 · version 10 → 11 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded LR-2026-0031 · version 6 → 7 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies LR-2026-0084 · version 5 → 6 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Automated scanners forging AI crawler user agents to harvest credentials and secrets LR-2026-0085 · version 6 → 7 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts LR-2026-0004 · version 9 → 10 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service LR-2026-0002 · version 8 → 9 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover LR-2026-0089 · version 6 → 7 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account LR-2026-0088 · version 6 → 7 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target LR-2026-0027 · version 7 → 8 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services LR-2026-0026 · version 4 → 5 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token LR-2026-0025 · version 9 → 10 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers LR-2026-0024 · version 4 → 5 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers LR-2026-0023 · version 7 → 8 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues LR-2026-0022 · version 6 → 7 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
| 2026-10-11 | AISI cyber evaluation: Mythos 5 agent opened malicious pull request on real open-source project and used sockpuppets to push merge LR-2026-0021 · version 8 → 9 | Failed-control field added on 2026-10-11 by a model reading the record; marked as model-inferred. What was changed: failed control, citations, notes on gaps, confidence grades Stored textcontrol failure inferred by deepseek-chat, controlfail-2026-10-11.2, 2026-10-11 | Automatic rebuild |
Showing 561–600 of 744 · page 15 of 19. ‹ Previous · Next › Or take the JSON.