Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
744 changes to 213 cases; the latest was on 2026-10-25.
Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-22 | Agentic NanoGPT optimization runs attempt reward hacking with brittle curve-fit optimizations LR-2026-0092 · version 9 → 10 | Corrected by Srini Iyer: the previous version gave its approval date as a day after it was made. What was changed: notes on gaps | Srini Iyer |
| 2026-10-22 | Anthropic Claude models gained unauthorized access to real third-party systems during evaluations LR-2026-0237 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse LR-2026-0235 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 3 more | Srini Iyer |
| 2026-10-22 | RL-trained agent on Alibaba AI engine team mined cryptocurrency on training server and opened reverse SSH tunnel to external IP LR-2026-0234 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Tesla Cybercab strikes water-filled pothole on first reported crash LR-2026-0233 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platform LR-2026-0228 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | ICMP evidence that Google Gemini reproduced lyrics by Australian artists LR-2026-0222 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing LR-2026-0218 · version 4 → 5 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: who was responsible, summary, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Deepfake video of President Marcos used to defraud Tarlac dentist of P93 million LR-2026-0217 · version 3 → 4 | Citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached. What was changed: what went wrong, notes on gaps | Srini Iyer |
| 2026-10-22 | OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised charges LR-2026-0212 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Nude deepfakes of Austrian MEP Lena Schilling and 49 other MEPs circulated online LR-2026-0210 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack LR-2026-0209 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | Character.AI chatbots promoted as therapists/psychologists; states cite 2024 wrongful-death suit and privacy concerns in bankruptcy filing LR-2026-0207 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Indirect prompt injection attempts embedded in HTTP response headers across websites LR-2026-0202 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week LR-2026-0197 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause in detail, citations and 3 more | Srini Iyer |
| 2026-10-22 | CERT-In advisory: AI agents accessed Indian organisations' systems without authorisation LR-2026-0196 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Eight state attorneys general sue OpenAI over alleged harms to teenage ChatGPT users LR-2026-0193 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLI LR-2026-0192 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, cause, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy services LR-2026-0191 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent LR-2026-0189 · version 2 → 3 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: who was responsible, cause, cause in detail, summary and 4 more | Srini Iyer |
| 2026-10-22 | Waymo robotaxi maneuvers around stopped, unloading school bus in Atlanta LR-2026-0188 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts LR-2026-0181 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones LR-2026-0173 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents LR-2026-0168 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | Fideuram (Intesa Sanpaolo private banking) deepfake voice/video executive impersonation fraud LR-2026-0167 · version 4 → 5 | Citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached. What was changed: what went wrong, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild LR-2026-0165 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AI-morphed obscene image used to blackmail 19-year-old in Mangaluru LR-2026-0158 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Anthropic agents submitted 20 incomplete visa applications on State Department website LR-2026-0156 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Anthropic AI agent sends fabricated murder tip to Philadelphia Police LR-2026-0152 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause in detail, citations and 3 more | Srini Iyer |
| 2026-10-22 | AI-assisted LinkedIn scraping used to build 'Traitorbase' doxxing spreadsheet targeting RNLI staff and anti-racism activists LR-2026-0151 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Common Sense Media rates ChatGPT for Teens an 'unacceptable risk' after safety testing LR-2026-0142 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks LR-2026-0140 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | Deepfake investment-scam ads impersonating Nigerian public figures on Facebook LR-2026-0139 · version 4 → 5 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached; who found it was regraded from its… What was changed: shared exposure, what went wrong, who was responsible, cause and 4 more The whole reasonA judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached; who found it was regraded from its sentence. | Srini Iyer |
| 2026-10-22 | Meta Muse AI agent KVM escape vulnerability discovered before launch LR-2026-0137 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 4 more | Srini Iyer |
| 2026-10-22 | Prompt-injected email assistant summary pushes employee toward fraudulent vendor payment LR-2026-0135 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: insurance, shared exposure, who was responsible, citations and 2 more | Srini Iyer |
| 2026-10-22 | Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data LR-2026-0133 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: citations, notes on gaps, confidence grades, can it be undone | Srini Iyer |
| 2026-10-22 | South Korean government evaluation finds all tested autonomous AI agent models vulnerable to prompt injection and long-term memory attacks LR-2026-0130 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | OpenAI agents scrape and edit Wikipedia without authorization LR-2026-0129 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 3 more | Srini Iyer |
| 2026-10-22 | Claude Code agent deletes 48,218 Windows project files and damages Git object store LR-2026-0126 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Indirect prompt injection of AI email summarizer via forged header blocks in plain view LR-2026-0125 · version 3 → 4 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: shared exposure, cause, cause in detail, summary and 3 more | Srini Iyer |
Showing 161–200 of 744 · page 5 of 19. ‹ Previous · Next › Or take the JSON.