Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
744 changes to 213 cases; the latest was on 2026-10-25.
Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2
Showing 357 of 744: Reviewer corrections. All changes
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-25 | OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database LR-2026-0063 · version 18 → 19 | Corrected by Srini Iyer, approved 2026-10-23: the severity reason used the rubric's internal wording; reworded in plain words. What was changed: notes on gaps, sources, schema version | Srini Iyer |
| 2026-10-23 | OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database LR-2026-0063 · version 17 → 18 | The severity reason used the rubric's internal wording; reworded in plain words. What was changed: notes on gaps, sources | Srini Iyer |
| 2026-10-23 | OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet LR-2026-0001 · version 4 → 5 | Corrected by Srini Iyer, approved 2026-10-22: this record had been merged into the record of another event by mistake; it is a case of its own again. What was changed: the deep dive | Srini Iyer |
| 2026-10-23 | OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions LR-2026-0003 · version 18 → 19 | Corrected by Srini Iyer, approved 2026-10-22: citations to sentences about a different event were removed. What was changed: notes on gaps, sources | Srini Iyer |
| 2026-10-23 | OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database LR-2026-0063 · version 16 → 17 | The severity reason used the rubric's internal wording; reworded in plain words. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-23 | Anthropic model conducted state-sponsored espionage campaign against ~30 targets LR-2026-0056 · version 5 → 6 | The severity reason used the rubric's internal wording; reworded in plain words. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-23 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form LR-2026-0054 · version 12 → 13 | Corrected by Srini Iyer, approved 2026-10-22: a record of another event had been merged into this one by mistake; the merge was undone. What was changed: notes on gaps, sources, the story | Srini Iyer |
| 2026-10-23 | OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses LR-2026-0005 · version 14 → 15 | Corrected by Srini Iyer, approved 2026-10-22: a record of another event had been merged into this one by mistake; the merge was undone. What was changed: the deep dive, earliest source we hold, citations, notes on gaps and 4 more | Srini Iyer |
| 2026-10-23 | Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platform LR-2026-0228 · version 5 → 6 | Corrected by Srini Iyer, approved 2026-10-22: a denominator from another event or of another kind was cleared. What was changed: base count, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-23 | Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week LR-2026-0197 · version 7 → 8 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record. What was changed: notes on gaps, severity, why this severity | Srini Iyer |
| 2026-10-23 | NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones LR-2026-0173 · version 6 → 7 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record. What was changed: notes on gaps, severity, why this severity | Srini Iyer |
| 2026-10-23 | Anthropic agents submitted 20 incomplete visa applications on State Department website LR-2026-0156 · version 5 → 6 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record. What was changed: notes on gaps, severity, why this severity | Srini Iyer |
| 2026-10-23 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form LR-2026-0054 · version 11 → 12 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record. What was changed: notes on gaps, severity, why this severity | Srini Iyer |
| 2026-10-23 | Typosquatted agent skills trojanized to deliver credential-harvesting infostealer LR-2026-0087 · version 7 → 8 | Corrected by Srini Iyer, approved 2026-10-22: a denominator from another event or of another kind was cleared. What was changed: base count, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-23 | Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover LR-2026-0089 · version 9 → 10 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record. What was changed: notes on gaps, severity, why this severity | Srini Iyer |
| 2026-10-23 | AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token LR-2026-0025 · version 15 → 16 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record. What was changed: notes on gaps, severity, why this severity | Srini Iyer |
| 2026-10-23 | AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers LR-2026-0024 · version 10 → 11 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record. What was changed: notes on gaps, severity, why this severity | Srini Iyer |
| 2026-10-23 | AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent LR-2026-0090 · version 11 → 12 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record. What was changed: notes on gaps, severity, why this severity | Srini Iyer |
| 2026-10-23 | OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist LR-2026-0046 · version 8 → 9 | Corrected by Srini Iyer, approved 2026-10-22: graded as stated by a primary source when its only source is secondary; regraded. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-23 | OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist LR-2026-0046 · version 7 → 8 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record; the summary now opens with what the AI did. What was changed: summary, citations, notes on gaps, confidence grades and 1 more | Srini Iyer |
| 2026-10-23 | OpenAI agents leak 53 ChatGPT user images LR-2026-0068 · version 9 → 10 | Corrected by Srini Iyer, approved 2026-10-22: a judgement inferred by us that no source states was cleared; a value cited to a sentence about a different event or company was cleared. What was changed: shared exposure, what it did, what was done, who was responsible and 5 more | Srini Iyer |
| 2026-10-23 | OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist LR-2026-0046 · version 6 → 7 | Corrected by Srini Iyer, approved 2026-10-22: a judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-23 | OpenAI agents leak 53 ChatGPT user images LR-2026-0068 · version 8 → 9 | Corrected by Srini Iyer, approved 2026-10-22: citations to sentences about a different event were removed. What was changed: citations, notes on gaps | Srini Iyer |
| 2026-10-23 | OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database LR-2026-0063 · version 14 → 15 | Corrected by Srini Iyer, approved 2026-10-22: citations to sentences about a different event were removed. What was changed: the deep dive, notes on gaps, the story | Srini Iyer |
| 2026-10-23 | OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist LR-2026-0046 · version 5 → 6 | Corrected by Srini Iyer, approved 2026-10-22: a judgement inferred by us that no source states was cleared; a value cited to a sentence about a different event or company was cleared; citations to sentences about a different event were removed; severity reason did not fit its quote or the… What was changed: what it did, citations, notes on gaps, confidence grades and 3 more The whole reasonCorrected by Srini Iyer, approved 2026-10-22: a judgement inferred by us that no source states was cleared; a value cited to a sentence about a different event or company was cleared; citations to sentences about a different event were removed; severity reason did not fit its quote or the record. | Srini Iyer |
| 2026-10-23 | AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent LR-2026-0090 · version 10 → 11 | Corrected by Srini Iyer, approved 2026-10-22: citations to sentences about a different event were removed. What was changed: citations, notes on gaps | Srini Iyer |
| 2026-10-23 | OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses LR-2026-0005 · version 13 → 14 | Corrected by Srini Iyer, approved 2026-10-22: citations to sentences about a different event were removed. What was changed: citations, notes on gaps | Srini Iyer |
| 2026-10-23 | OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions LR-2026-0003 · version 17 → 18 | Corrected by Srini Iyer, approved 2026-10-22: citations to sentences about a different event were removed. What was changed: notes on gaps, the story | Srini Iyer |
| 2026-10-23 | GitLab Duo Agent Platform AI agent instruction manipulation (CVE-2026-96893) LR-2026-0176 · version 2 → 4 | Corrected by Srini Iyer, approved 2026-10-22: this record had been merged into the record of another event by mistake; it is a case of its own again; a value cited to a sentence about a different event or company was cleared; an attribution the source hedges is no longer stated as fact; severity reason did not fit its quote or the record; summary or story described a different event or the article, not this… What was changed: how it was checked The whole reasonCorrected by Srini Iyer, approved 2026-10-22: this record had been merged into the record of another event by mistake; it is a case of its own again; a value cited to a sentence about a different event or company was cleared; an attribution the source hedges is no longer stated as fact; severity reason did not fit its quote or the record; summary or story described a different event or the article, not this event. | Srini Iyer |
| 2026-10-23 | AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks LR-2026-0140 · version 9 → 10 | Corrected by Srini Iyer, approved 2026-10-22: the date of the earliest source now names the earliest source the record holds. What was changed: earliest source we hold, citations, notes on gaps | Srini Iyer |
| 2026-10-23 | GitLab AI Gateway prompt template sandbox escape (CVE-2026-90970) LR-2026-0116 · version 6 → 7 | Corrected by Srini Iyer, approved 2026-10-22: a record of another event had been merged into this one by mistake; the merge was undone. What was changed: notes on gaps, sources | Srini Iyer |
| 2026-10-23 | OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database LR-2026-0063 · version 13 → 14 | Corrected by Srini Iyer, approved 2026-10-22: a record of another event had been merged into this one by mistake; the merge was undone. What was changed: earliest source we hold, citations, notes on gaps, sources | Srini Iyer |
| 2026-10-23 | Zhipu ZCode repository snapshot upload without clear consent LR-2026-0050 · version 8 → 9 | Corrected by Srini Iyer, approved 2026-10-22: the date of the earliest source now names the earliest source the record holds. What was changed: earliest source we hold, citations, notes on gaps | Srini Iyer |
| 2026-10-23 | AEPD-confirmed autonomous AI agent data breach (Spain) LR-2026-0059 · version 7 → 8 | Corrected by Srini Iyer, approved 2026-10-22: the date of the earliest source now names the earliest source the record holds. What was changed: earliest source we hold, citations, notes on gaps | Srini Iyer |
| 2026-10-23 | OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions LR-2026-0003 · version 16 → 17 | Corrected by Srini Iyer, approved 2026-10-22: a record of another event had been merged into this one by mistake; the merge was undone. What was changed: notes on gaps, sources | Srini Iyer |
| 2026-10-23 | Claude Code used by Yemen-based actors to develop guided-weapon GNC software LR-2026-0080 · version 6 → 7 | Corrected by Srini Iyer, approved 2026-10-22: a judgement inferred by us that no source states was cleared; a story step that repeated an earlier step now gives what its own sentence states; a value that only repeated another field was cleared; a value the sources do not support was cleared; the attackers were listed as the party affected; cleared; the kind of failure did not fit the event its sentences… What was changed: what went wrong, citations, notes on gaps, confidence grades and 4 more The whole reasonCorrected by Srini Iyer, approved 2026-10-22: a judgement inferred by us that no source states was cleared; a story step that repeated an earlier step now gives what its own sentence states; a value that only repeated another field was cleared; a value the sources do not support was cleared; the attackers were listed as the party affected; cleared; the kind of failure did not fit the event its sentences describe. | Srini Iyer |
| 2026-10-23 | Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation LR-2026-0033 · version 5 → 6 | Corrected by Srini Iyer, approved 2026-10-22: severity reason did not fit its quote or the record. What was changed: notes on gaps, severity | Srini Iyer |
| 2026-10-22 | Tesla Cybercab strikes water-filled pothole on first reported crash LR-2026-0233 · version 3 → 4 | A value marked as inferred is stated by a cited sentence; regraded; citations to sentences about a different event were removed. What was changed: notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platform LR-2026-0228 · version 4 → 5 | A stated loss or count the fields cannot hold was recorded in the notes; an attribution the source hedges is no longer stated as fact; citations to sentences about a different event were removed. What was changed: summary, citations, notes on gaps, confidence grades and 2 more | Srini Iyer |
| 2026-10-22 | Deepfake video of President Marcos used to defraud Tarlac dentist of P93 million LR-2026-0217 · version 4 → 5 | A stated loss or count the fields cannot hold was recorded in the notes. What was changed: notes on gaps | Srini Iyer |
Showing 1–40 of 357 · page 1 of 9. Next › Or take the JSON.