Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
744 changes to 213 cases; the latest was on 2026-10-25.
Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2
Showing 357 of 744: Reviewer corrections. All changes
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-22 | Indirect prompt injection attempts embedded in HTTP response headers across websites LR-2026-0202 · version 5 → 6 | A recommendation was no longer shown as what was done; a value cited to a sentence about a different event or company was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this… What was changed: summary, citations, notes on gaps, confidence grades and 3 more The whole reasonA recommendation was no longer shown as what was done; a value cited to a sentence about a different event or company was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. | Srini Iyer |
| 2026-10-22 | CERT-In advisory: AI agents accessed Indian organisations' systems without authorisation LR-2026-0196 · version 5 → 6 | Citations to sentences about a different event were removed; the trigger a cited sentence states was filled. What was changed: what set it off, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent LR-2026-0189 · version 3 → 4 | Citations to sentences about a different event were removed; the trigger a cited sentence states was filled. What was changed: what set it off, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Fideuram (Intesa Sanpaolo private banking) deepfake voice/video executive impersonation fraud LR-2026-0167 · version 5 → 6 | A stated loss or count the fields cannot hold was recorded in the notes. What was changed: notes on gaps | Srini Iyer |
| 2026-10-22 | AI-morphed obscene image used to blackmail 19-year-old in Mangaluru LR-2026-0158 · version 4 → 5 | A stated loss or count the fields cannot hold was recorded in the notes. What was changed: notes on gaps | Srini Iyer |
| 2026-10-22 | AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks LR-2026-0140 · version 8 → 9 | A stated loss or count the fields cannot hold was recorded in the notes; source gives a bound, not an exact count. What was changed: citations, notes on gaps, confidence grades, other parties affected | Srini Iyer |
| 2026-10-22 | Indirect prompt injection of AI email summarizer via forged header blocks in plain view LR-2026-0125 · version 4 → 5 | Citations to sentences about a different event were removed; the trigger a cited sentence states was filled. What was changed: what set it off, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Microsoft reports 50 prompt-based attempts to poison AI assistant memory across 31 companies LR-2026-0115 · version 2 → 3 | Citations to sentences about a different event were removed; the trigger a cited sentence states was filled. What was changed: what set it off, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form LR-2026-0054 · version 10 → 11 | Severity reason did not fit its quote or the record. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-22 | Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training LR-2026-0016 · version 14 → 15 | A value marked as inferred is stated by a cited sentence; regraded; citations to sentences about a different event were removed. What was changed: notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | OpenAI research models used internal Artifactory repository as a cross-sample message board during RL training LR-2026-0015 · version 12 → 13 | A value the sources do not support was cleared. What was changed: citations, notes on gaps, confidence grades, software around the model | Srini Iyer |
| 2026-10-22 | Unreleased OpenAI models uploaded task data and a task photo to public file hosts to obtain citations and image search during RL training LR-2026-0014 · version 12 → 13 | A value marked as inferred is stated by a cited sentence; regraded; citations to sentences about a different event were removed. What was changed: notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | GPT-5.6 Sol added instructions to conceal mistakes from the user in compaction summaries during RL training LR-2026-0012 · version 14 → 15 | A value the sources do not support was cleared. What was changed: citations, notes on gaps, confidence grades, software around the model | Srini Iyer |
| 2026-10-22 | OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service LR-2026-0002 · version 14 → 15 | A value marked as inferred is stated by a cited sentence; regraded; an event recorded in another case was counted here; severity now rests on this case's own event; citations to sentences about a different event were removed. What was changed: citations, notes on gaps, confidence grades, severity and 2 more | Srini Iyer |
| 2026-10-22 | AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent LR-2026-0090 · version 8 → 9 | Severity reason did not fit its quote or the record. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-22 | GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts LR-2026-0181 · version 7 → 8 | The previous version gave its approval date as a day after it was made. What was changed: notes on gaps | Srini Iyer |
| 2026-10-22 | Agentic NanoGPT optimization runs attempt reward hacking with brittle curve-fit optimizations LR-2026-0092 · version 10 → 11 | The previous version gave its approval date as a day after it was made. What was changed: notes on gaps | Srini Iyer |
| 2026-10-22 | GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts LR-2026-0181 · version 6 → 7 | Corrected by Srini Iyer: the previous version gave its approval date as a day after it was made. What was changed: notes on gaps | Srini Iyer |
| 2026-10-22 | Agentic NanoGPT optimization runs attempt reward hacking with brittle curve-fit optimizations LR-2026-0092 · version 9 → 10 | Corrected by Srini Iyer: the previous version gave its approval date as a day after it was made. What was changed: notes on gaps | Srini Iyer |
| 2026-10-22 | Anthropic Claude models gained unauthorized access to real third-party systems during evaluations LR-2026-0237 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse LR-2026-0235 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 3 more | Srini Iyer |
| 2026-10-22 | RL-trained agent on Alibaba AI engine team mined cryptocurrency on training server and opened reverse SSH tunnel to external IP LR-2026-0234 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Tesla Cybercab strikes water-filled pothole on first reported crash LR-2026-0233 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platform LR-2026-0228 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | ICMP evidence that Google Gemini reproduced lyrics by Australian artists LR-2026-0222 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing LR-2026-0218 · version 4 → 5 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: who was responsible, summary, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Deepfake video of President Marcos used to defraud Tarlac dentist of P93 million LR-2026-0217 · version 3 → 4 | Citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached. What was changed: what went wrong, notes on gaps | Srini Iyer |
| 2026-10-22 | OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised charges LR-2026-0212 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Nude deepfakes of Austrian MEP Lena Schilling and 49 other MEPs circulated online LR-2026-0210 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack LR-2026-0209 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | Character.AI chatbots promoted as therapists/psychologists; states cite 2024 wrongful-death suit and privacy concerns in bankruptcy filing LR-2026-0207 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Indirect prompt injection attempts embedded in HTTP response headers across websites LR-2026-0202 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week LR-2026-0197 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause in detail, citations and 3 more | Srini Iyer |
| 2026-10-22 | CERT-In advisory: AI agents accessed Indian organisations' systems without authorisation LR-2026-0196 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Eight state attorneys general sue OpenAI over alleged harms to teenage ChatGPT users LR-2026-0193 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLI LR-2026-0192 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, cause, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy services LR-2026-0191 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent LR-2026-0189 · version 2 → 3 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: who was responsible, cause, cause in detail, summary and 4 more | Srini Iyer |
| 2026-10-22 | Waymo robotaxi maneuvers around stopped, unloading school bus in Atlanta LR-2026-0188 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts LR-2026-0181 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
Showing 41–80 of 357 · page 2 of 9. ‹ Previous · Next › Or take the JSON.