Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
744 changes to 213 cases; the latest was on 2026-10-25.
Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-22 | OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database LR-2026-0063 · version 12 → 13 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, cause, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | Agentic NanoGPT optimization runs attempt reward hacking with brittle curve-fit optimizations LR-2026-0092 · version 8 → 9 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: shared exposure, summary, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | Model writes and runs code on external internet service to reach AISI evaluation infrastructure during impossible cyber evaluation LR-2026-0049 · version 8 → 9 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: insurance, shared exposure, who was responsible, cause and 6 more | Srini Iyer |
| 2026-10-22 | OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses LR-2026-0005 · version 11 → 12 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions LR-2026-0003 · version 15 → 16 | A judgement inferred by us that no source states was cleared. What was changed: citations, notes on gaps, confidence grades, can it be undone | Srini Iyer |
| 2026-10-22 | AI voice-clone grandparent scam in Florida ("crying daughter" call, $15,000 cash pickup) LR-2026-0094 · version 6 → 7 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached. What was changed: shared exposure, what went wrong, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address LR-2026-0047 · version 9 → 10 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: shared exposure, who was responsible, cause, cause in detail and 5 more | Srini Iyer |
| 2026-10-22 | Cursor coding agent deletes PocketOS production database and backups LR-2026-0095 · version 10 → 11 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause in detail, citations and 3 more | Srini Iyer |
| 2026-10-22 | Google Antigravity agent deleted a user's entire D: drive while attempting to clear a project cache LR-2025-0043 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations LR-2025-0044 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration LR-2025-0041 · version 8 → 9 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: who was responsible, cause, cause in detail, summary and 4 more | Srini Iyer |
| 2026-10-22 | Amazon Q Developer VS Code extension shipped an injected prompt instructing the agent to wipe files and AWS resources LR-2025-0042 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades and 1 more | Srini Iyer |
| 2026-10-22 | Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible LR-2025-0031 · version 11 → 12 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 3 more | Srini Iyer |
| 2026-10-22 | Character.AI chatbot alleged to have encouraged 14-year-old's suicide (Garcia v. Character.AI) LR-2026-0100 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts LR-2026-0181 · version 4 → 5 | Corrected by Srini Iyer: the denominator rests on a secondary source, so it is not graded A. What was changed: notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Agentic NanoGPT optimization runs attempt reward hacking with brittle curve-fit optimizations LR-2026-0092 · version 7 → 8 | Corrected by Srini Iyer: the denominator rests on a secondary source, so it is not graded A. What was changed: notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AI-generated 'Xiaohai' teen persona used to sell products to older women via fabricated sob stories LR-2026-0227 · version 3 → 4 | Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: summary, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Character.AI chatbots promoted as therapists/psychologists; states cite 2024 wrongful-death suit and privacy concerns in bankruptcy filing LR-2026-0207 · version 5 → 6 | An event recorded in another case was counted here; severity now rests on this case's own event; citations to sentences about a different event were removed; linked to the records that report the same disclosure or name each… What was changed: related cases, citations, notes on gaps, confidence grades and 4 more The whole reasonAn event recorded in another case was counted here; severity now rests on this case's own event; citations to sentences about a different event were removed; linked to the records that report the same disclosure or name each other. | Srini Iyer |
| 2026-10-22 | Indirect prompt injection attempts embedded in HTTP response headers across websites LR-2026-0202 · version 3 → 4 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts LR-2026-0181 · version 3 → 4 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones LR-2026-0173 · version 4 → 5 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Common Sense Media rates ChatGPT for Teens an 'unacceptable risk' after safety testing LR-2026-0142 · version 4 → 5 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks LR-2026-0140 · version 6 → 7 | A denominator from another event or of another kind was cleared. What was changed: base count, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data LR-2026-0133 · version 3 → 4 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | South Korean government evaluation finds all tested autonomous AI agent models vulnerable to prompt injection and long-term memory attacks LR-2026-0130 · version 2 → 3 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Indirect prompt injection of AI email summarizer via forged header blocks in plain view LR-2026-0125 · version 2 → 3 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | GitLab AI Gateway prompt template sandbox escape (CVE-2026-90970) LR-2026-0116 · version 4 → 5 | A value cited to a sentence about a different event or company was cleared; a value marked as inferred is stated by a cited sentence; regraded; citations to sentences about a different event were removed. What was changed: shared model, near miss, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | AI agents attempt unauthorized access to Library and Archives Canada website LR-2026-0111 · version 2 → 3 | A value marked as inferred is stated by a cited sentence; regraded; citations to sentences about a different event were removed. What was changed: notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer LR-2026-0103 · version 3 → 4 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | OpenAI agents bypass website security controls and republish SEC data LR-2026-0069 · version 7 → 8 | An event recorded in another case was counted here; severity now rests on this case's own event; citations to sentences about a different event were removed; linked to the records that report the same disclosure or name each… What was changed: related cases, summary, citations, notes on gaps and 3 more The whole reasonAn event recorded in another case was counted here; severity now rests on this case's own event; citations to sentences about a different event were removed; linked to the records that report the same disclosure or name each other. | Srini Iyer |
| 2026-10-22 | OpenAI agents leak 53 ChatGPT user images LR-2026-0068 · version 5 → 6 | Linked to the records that report the same disclosure or name each other. What was changed: related cases, notes on gaps | Srini Iyer |
| 2026-10-22 | Frontier LLM agent fabricated a complete calibration-comparison report for commands that never ran LR-2026-0051 · version 4 → 5 | A safeguard state its own quote contradicts was removed; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: cause, cause in detail, summary, citations and 2 more | Srini Iyer |
| 2026-10-22 | OpenAI research models used internal Artifactory repository as a cross-sample message board during RL training LR-2026-0015 · version 10 → 11 | A value marked as inferred is stated by a cited sentence; regraded; citations to sentences about a different event were removed. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Unreleased OpenAI Astra-family model inserted jailbreak-like instructions into its own compaction summaries during RL training LR-2026-0011 · version 12 → 13 | A value marked as inferred is stated by a cited sentence; regraded; citations to sentences about a different event were removed. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts LR-2026-0004 · version 13 → 14 | Citations to sentences about a different event were removed. What was changed: citations, notes on gaps | Srini Iyer |
| 2026-10-22 | OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service LR-2026-0002 · version 12 → 13 | A value marked as inferred is stated by a cited sentence; regraded; citations to sentences about a different event were removed; web-page link text was cut from a quotation. What was changed: failed control, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target LR-2026-0027 · version 11 → 12 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services LR-2026-0026 · version 8 → 9 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token LR-2026-0025 · version 13 → 14 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers LR-2026-0024 · version 8 → 9 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
Showing 241–280 of 744 · page 7 of 19. ‹ Previous · Next › Or take the JSON.