Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
744 changes to 213 cases; the latest was on 2026-10-25.
Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-25 | Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hiding LR-2026-0106 · version 4 → 5 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 1 more | Srini Iyer |
| 2026-10-25 | AI-generated sexually explicit deepfake smear campaign against Porsche sales consultant Mu Qianwen LR-2026-0105 · version 3 → 4 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, affected party | Srini Iyer |
| 2026-10-25 | Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer LR-2026-0103 · version 5 → 6 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 4 more | Srini Iyer |
| 2026-10-25 | OpenAI agents bypass website security controls and republish SEC data LR-2026-0069 · version 9 → 10 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, model provider and 1 more | Srini Iyer |
| 2026-10-25 | OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems LR-2026-0071 · version 7 → 8 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, model provider | Srini Iyer |
| 2026-10-25 | OpenAI agents leak 53 ChatGPT user images LR-2026-0068 · version 10 → 11 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, affected party and 2 more | Srini Iyer |
| 2026-10-25 | OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database LR-2026-0063 · version 19 → 20 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 2 more | Srini Iyer |
| 2026-10-25 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form LR-2026-0054 · version 13 → 14 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, system provider | Srini Iyer |
| 2026-10-25 | Anthropic model conducted state-sponsored espionage campaign against ~30 targets LR-2026-0056 · version 6 → 7 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, model provider | Srini Iyer |
| 2026-10-25 | Zhipu ZCode repository snapshot upload without clear consent LR-2026-0050 · version 9 → 10 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, system provider | Srini Iyer |
| 2026-10-25 | Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation LR-2026-0033 · version 6 → 7 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, severity rule fact and 1 more | Srini Iyer |
| 2026-10-25 | Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training LR-2026-0016 · version 15 → 16 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 1 more | Srini Iyer |
| 2026-10-25 | OpenAI research models used internal Artifactory repository as a cross-sample message board during RL training LR-2026-0015 · version 13 → 14 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 2 more | Srini Iyer |
| 2026-10-25 | Unreleased OpenAI models uploaded task data and a task photo to public file hosts to obtain citations and image search during RL training LR-2026-0014 · version 13 → 14 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, model provider | Srini Iyer |
| 2026-10-25 | GPT-5.6 Sol added instructions to conceal mistakes from the user in compaction summaries during RL training LR-2026-0012 · version 15 → 16 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, model provider | Srini Iyer |
| 2026-10-25 | Wenyi AI pipeline publishes unlicensed Chinese translation of Murakami novel hours after Japanese release LR-2026-0082 · version 6 → 7 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, model provider | Srini Iyer |
| 2026-10-25 | OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses LR-2026-0005 · version 15 → 16 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-25 | Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies LR-2026-0084 · version 8 → 9 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, model provider | Srini Iyer |
| 2026-10-25 | Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document LR-2026-0086 · version 7 → 8 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, model provider | Srini Iyer |
| 2026-10-25 | OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts LR-2026-0004 · version 15 → 16 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 1 more | Srini Iyer |
| 2026-10-25 | OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service LR-2026-0002 · version 15 → 16 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 3 more | Srini Iyer |
| 2026-10-25 | OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist LR-2026-0046 · version 10 → 11 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 2 more | Srini Iyer |
| 2026-10-25 | Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover LR-2026-0089 · version 10 → 11 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, model provider and 1 more | Srini Iyer |
| 2026-10-25 | Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account LR-2026-0088 · version 8 → 9 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, system provider | Srini Iyer |
| 2026-10-25 | AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target LR-2026-0027 · version 12 → 13 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-25 | AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers LR-2026-0024 · version 11 → 12 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-25 | AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues LR-2026-0022 · version 12 → 13 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-25 | AISI cyber evaluation: Mythos 5 agent opened malicious pull request on real open-source project and used sockpuppets to push merge LR-2026-0021 · version 13 → 14 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-25 | Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training LR-2026-0013 · version 17 → 18 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, system provider | Srini Iyer |
| 2026-10-25 | AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent LR-2026-0090 · version 12 → 13 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, system provider | Srini Iyer |
| 2026-10-25 | OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet LR-2026-0001 · version 5 → 6 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 3 more | Srini Iyer |
| 2026-10-25 | OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions LR-2026-0003 · version 19 → 20 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 3 more | Srini Iyer |
| 2026-10-25 | AI voice-clone grandparent scam in Florida ("crying daughter" call, $15,000 cash pickup) LR-2026-0094 · version 7 → 8 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, affected party and 1 more | Srini Iyer |
| 2026-10-25 | Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address LR-2026-0047 · version 10 → 11 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 2 more | Srini Iyer |
| 2026-10-25 | Cursor coding agent deletes PocketOS production database and backups LR-2026-0095 · version 11 → 12 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 2 more | Srini Iyer |
| 2026-10-25 | Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records LR-2026-0096 · version 5 → 6 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, affected party and 1 more | Srini Iyer |
| 2026-10-25 | Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage LR-2026-0048 · version 7 → 8 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, affected party and 1 more | Srini Iyer |
| 2026-10-25 | Google Antigravity agent deleted a user's entire D: drive while attempting to clear a project cache LR-2025-0043 · version 5 → 6 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: deployer, citations, notes on gaps, confidence grades and 2 more | Srini Iyer |
| 2026-10-25 | Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations LR-2025-0044 · version 8 → 9 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, affected party | Srini Iyer |
| 2026-10-25 | Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible LR-2025-0031 · version 12 → 13 | Standard terms read by deepseek-chat / deepseek-reasoner, terms-2026-10-25.3 / terms-roles-2026-10-25.2 / terms-2026-10-25.3; values checked by Claude against their sentences, approved by Srini Iyer, 2026-10-25 What was changed: citations, notes on gaps, confidence grades, affected party and 3 more | Srini Iyer |
Showing 41–80 of 744 · page 2 of 19. ‹ Previous · Next › Or take the JSON.