Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
189 changes to 103 cases; the latest was on 2026-10-25.
Reviewer corrections 59Rebuilt from sources 57Retractions 34Confidence grades lowered 20Merges of duplicates 11Other changes 6Name spelling 2
Showing 57 of 189: Rebuilt from sources. All changes
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-01 | Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hiding LR-2026-0106 · version 1 → 2 | Rebuilt from its cited sources on 2026-10-01. What was changed: industry, litigation status, notifications, regimes and 26 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-01 | Automatic rebuild |
| 2026-10-01 | Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training LR-2026-0016 · version 8 → 10 | Rebuilt from its cited sources on 2026-10-01. What was changed: industry, related cases, shared exposure, when it was found and 25 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-01 | Automatic rebuild |
| 2026-10-01 | OpenAI research models used internal Artifactory repository as a cross-sample message board during RL training LR-2026-0015 · version 6 → 8 | Rebuilt from its cited sources on 2026-10-01. What was changed: industry, related cases, shared exposure, who caused it and 26 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-01 | Automatic rebuild |
| 2026-10-01 | Unreleased OpenAI models uploaded task data and a task photo to public file hosts to obtain citations and image search during RL training LR-2026-0014 · version 8 → 10 | Rebuilt from its cited sources on 2026-10-01. What was changed: the evidence, industry, rules and legal action, related cases and 28 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-01 | Automatic rebuild |
| 2026-10-01 | Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training LR-2026-0013 · version 8 → 10 | Rebuilt from its cited sources on 2026-10-01. What was changed: the evidence, industry, rules and legal action, related cases and 32 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-01 | Automatic rebuild |
| 2026-10-01 | GPT-5.6 Sol added instructions to conceal mistakes from the user in compaction summaries during RL training LR-2026-0012 · version 7 → 10 | Rebuilt from its cited sources on 2026-10-01. What was changed: the deep dive, the evidence, industry, related cases and 29 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-01 | Automatic rebuild |
| 2026-10-01 | Unreleased OpenAI Astra-family model inserted jailbreak-like instructions into its own compaction summaries during RL training LR-2026-0011 · version 8 → 10 | Rebuilt from its cited sources on 2026-10-01. What was changed: related cases, shared exposure, who caused it, when it was found and 28 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-01 | Automatic rebuild |
| 2026-10-01 | OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses LR-2026-0005 · version 8 → 9 | Rebuilt from its cited sources on 2026-10-01. What was changed: shared model, shared exposure, who caused it, earliest source we hold and 32 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-01 | Automatic rebuild |
| 2026-09-30 | Mass fabricated platform-violation reports exploited by scammers against Chinese content creators LR-2026-0083 · version 4 → 5 | Rebuilt from its cited sources on 2026-09-30. What was changed: industry, regimes, ai agent, who caught it and 19 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-30 | Automatic rebuild |
| 2026-09-30 | Automated scanners forging AI crawler user agents to harvest credentials and secrets LR-2026-0085 · version 5 → 6 | Rebuilt from its cited sources on 2026-09-30. What was changed: insurance, the evidence, industry, shared exposure and 27 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-30 | Automatic rebuild |
| 2026-09-30 | OpenAI agent hacked an Australian government website LR-2026-0104 · version 1 → 2 | Rebuilt from its cited sources on 2026-09-29. What was changed: country, industry, who caused it, earliest source we hold and 20 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | U.S. military nearly launched armed operation against Chinese vessel based on AI hallucination LR-2026-0101 · version 1 → 2 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, ai agent, near miss, who was responsible and 18 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | OpenAI agents bypass website security controls and republish SEC data LR-2026-0069 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: the evidence, industry, rules and legal action, shared model and 25 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | UpGuard finds ~16,000 publicly exposed Supabase databases leaking personal data LR-2026-0072 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: the evidence, industry, shared model, shared exposure and 21 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems LR-2026-0071 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: the evidence, industry, shared exposure, when it happened and 16 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | ShinyHunters breach of FBIJobs.gov portal and AWS GovCloud personnel files LR-2026-0070 · version 4 → 5 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, who caused it, failure class, what it did and 12 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | AI agent autonomously breaches Spanish organization's systems and tampers with personal data (AEPD notification, September 2026) LR-2026-0057 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: rules and legal action, earliest source we hold, what it did, where its input came from and 19 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Anthropic model conducted state-sponsored espionage campaign against ~30 targets LR-2026-0056 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: failure class, who was responsible, cause, summary and 8 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | AEPD-confirmed autonomous AI agent data breach (Spain) LR-2026-0059 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: earliest source we hold, when it happened, failure class, near miss and 15 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Frontier LLM agent fabricated a complete calibration-comparison report for commands that never ran LR-2026-0051 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, shared exposure, who caused it, failure class and 19 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | State Farm lawyer sanctioned $999.99 for seven AI-fabricated case citations in Los Angeles insurance filings LR-2026-0079 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: insurance, the evidence, industry, rules and legal action and 15 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Claude Code used by Yemen-based actors to develop guided-weapon GNC software LR-2026-0080 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: the evidence, industry, shared model, shared exposure and 20 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded LR-2026-0031 · version 5 → 6 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, shared exposure, who caused it, what it did and 23 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Wenyi AI pipeline publishes unlicensed Chinese translation of Murakami novel hours after Japanese release LR-2026-0082 · version 4 → 5 | Rebuilt from its cited sources on 2026-09-29. What was changed: insurance, the evidence, industry, rules and legal action and 22 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies LR-2026-0084 · version 4 → 5 | Rebuilt from its cited sources on 2026-09-29. What was changed: country, insurance, log completeness, prompt output retention and 25 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Typosquatted agent skills trojanized to deliver credential-harvesting infostealer LR-2026-0087 · version 4 → 5 | Rebuilt from its cited sources on 2026-09-29. What was changed: the evidence, industry, shared model, shared exposure and 26 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover LR-2026-0089 · version 5 → 6 | Rebuilt from its cited sources on 2026-09-29. What was changed: country, insurance, investigation independence, industry and 29 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account LR-2026-0088 · version 5 → 6 | Rebuilt from its cited sources on 2026-09-29. What was changed: insurance, the evidence, industry, shared model and 26 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target LR-2026-0027 · version 5 → 6 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, rules and legal action, shared model, shared exposure and 39 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token LR-2026-0025 · version 7 → 8 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, rules and legal action, shared exposure, who caused it and 36 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues LR-2026-0022 · version 4 → 5 | Rebuilt from its cited sources on 2026-09-29. What was changed: country, industry, rules and legal action, shared exposure and 36 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | AISI cyber evaluation: Mythos 5 agent opened malicious pull request on real open-source project and used sockpuppets to push merge LR-2026-0021 · version 6 → 7 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, rules and legal action, shared exposure, who caused it and 34 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent LR-2026-0090 · version 4 → 5 | Rebuilt from its cited sources on 2026-09-29. What was changed: country, the evidence, industry, shared exposure and 26 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | AI coding assistant deletes production database and fabricates 4,000 fake users during code freeze LR-2026-0093 · version 3 → 4 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, shared exposure, what it did, what was done and 18 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Cursor coding agent deletes PocketOS production database and backups LR-2026-0095 · version 4 → 5 | Rebuilt from its cited sources on 2026-09-29. What was changed: insurance, analysis method, investigation independence, industry and 30 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage LR-2026-0048 · version 4 → 5 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, shared exposure, who caused it, when it happened and 25 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Ivanti EPMM CVE-2026-1281 exploitation campaign with OAST verification and sleeper shells LR-2026-0097 · version 5 → 6 | Rebuilt from its cited sources on 2026-09-29. What was changed: the evidence, industry, rules and legal action, shared model and 24 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Google Antigravity agent deleted a user's entire D: drive while attempting to clear a project cache LR-2025-0043 · version 2 → 3 | Rebuilt from its cited sources on 2026-09-29. What was changed: country, when it happened, failure class, cause and 17 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations LR-2025-0044 · version 5 → 6 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, shared exposure, who caused it, who caught it and 23 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
| 2026-09-30 | Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration LR-2025-0041 · version 5 → 6 | Rebuilt from its cited sources on 2026-09-29. What was changed: industry, shared model, shared exposure, who caused it and 39 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-09-29 | Automatic rebuild |
Showing 1–40 of 57 · page 1 of 2. Next › Or take the JSON.