Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
744 changes to 213 cases; the latest was on 2026-10-25.
Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2
Showing 357 of 744: Reviewer corrections. All changes
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-22 | NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones LR-2026-0173 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents LR-2026-0168 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | Fideuram (Intesa Sanpaolo private banking) deepfake voice/video executive impersonation fraud LR-2026-0167 · version 4 → 5 | Citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached. What was changed: what went wrong, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild LR-2026-0165 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AI-morphed obscene image used to blackmail 19-year-old in Mangaluru LR-2026-0158 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Anthropic agents submitted 20 incomplete visa applications on State Department website LR-2026-0156 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Anthropic AI agent sends fabricated murder tip to Philadelphia Police LR-2026-0152 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause in detail, citations and 3 more | Srini Iyer |
| 2026-10-22 | AI-assisted LinkedIn scraping used to build 'Traitorbase' doxxing spreadsheet targeting RNLI staff and anti-racism activists LR-2026-0151 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Common Sense Media rates ChatGPT for Teens an 'unacceptable risk' after safety testing LR-2026-0142 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks LR-2026-0140 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | Deepfake investment-scam ads impersonating Nigerian public figures on Facebook LR-2026-0139 · version 4 → 5 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached; who found it was regraded from its… What was changed: shared exposure, what went wrong, who was responsible, cause and 4 more The whole reasonA judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached; who found it was regraded from its sentence. | Srini Iyer |
| 2026-10-22 | Meta Muse AI agent KVM escape vulnerability discovered before launch LR-2026-0137 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 4 more | Srini Iyer |
| 2026-10-22 | Prompt-injected email assistant summary pushes employee toward fraudulent vendor payment LR-2026-0135 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: insurance, shared exposure, who was responsible, citations and 2 more | Srini Iyer |
| 2026-10-22 | Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data LR-2026-0133 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: citations, notes on gaps, confidence grades, can it be undone | Srini Iyer |
| 2026-10-22 | South Korean government evaluation finds all tested autonomous AI agent models vulnerable to prompt injection and long-term memory attacks LR-2026-0130 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | OpenAI agents scrape and edit Wikipedia without authorization LR-2026-0129 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 3 more | Srini Iyer |
| 2026-10-22 | Claude Code agent deletes 48,218 Windows project files and damages Git object store LR-2026-0126 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Indirect prompt injection of AI email summarizer via forged header blocks in plain view LR-2026-0125 · version 3 → 4 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: shared exposure, cause, cause in detail, summary and 3 more | Srini Iyer |
| 2026-10-22 | Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposure LR-2026-0123 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | AI agent breach of KB Kookmin Bank mobile work support system LR-2026-0121 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: citations, notes on gaps, confidence grades, can it be undone | Srini Iyer |
| 2026-10-22 | OpenClaw agent deletes hundreds of emails from primary Gmail account LR-2026-0118 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, citations, notes on gaps, confidence grades and 1 more | Srini Iyer |
| 2026-10-22 | GitLab AI Gateway prompt template sandbox escape (CVE-2026-90970) LR-2026-0116 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 3 more | Srini Iyer |
| 2026-10-22 | Reward hacking in Arcadia Impact automated research scaffold worker agents LR-2026-0114 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, cause, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | OpenAI cancels GPT-6.1 Astra release after model took actions without permission during internal testing LR-2026-0112 · version 3 → 4 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Guardian test: ChatGPT and Grok remove hijab from AI-generated image of Muslim woman LR-2026-0108 · version 2 → 3 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: shared exposure, who was responsible, cause, cause in detail and 4 more | Srini Iyer |
| 2026-10-22 | AI-generated sexually explicit deepfake smear campaign against Porsche sales consultant Mu Qianwen LR-2026-0105 · version 2 → 3 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer LR-2026-0103 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: citations, notes on gaps, confidence grades, can it be undone | Srini Iyer |
| 2026-10-22 | OpenAI agents bypass website security controls and republish SEC data LR-2026-0069 · version 8 → 9 | A judgement inferred by us that no source states was cleared; an event recorded in another case was counted here; severity now rests on this case's own event; citations to sentences about a different event were removed. What was changed: shared exposure, near miss, who was responsible, cause and 12 more | Srini Iyer |
| 2026-10-22 | OpenAI agents leak 53 ChatGPT user images LR-2026-0068 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems LR-2026-0071 · version 6 → 7 | A date that belongs to another event was replaced or cleared; a judgement inferred by us that no source states was cleared. What was changed: when it happened, cause, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | LLM pipeline deanonymizes pseudonymous Hacker News and scientist accounts LR-2026-0061 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades and 1 more | Srini Iyer |
| 2026-10-22 | Zhipu ZCode repository snapshot upload without clear consent LR-2026-0050 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AEPD-confirmed autonomous AI agent data breach (Spain) LR-2026-0059 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Frontier LLM agent fabricated a complete calibration-comparison report for commands that never ran LR-2026-0051 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation LR-2026-0033 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 3 more | Srini Iyer |
| 2026-10-22 | Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training LR-2026-0016 · version 13 → 14 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, cause, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | OpenAI research models used internal Artifactory repository as a cross-sample message board during RL training LR-2026-0015 · version 11 → 12 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Unreleased OpenAI models uploaded task data and a task photo to public file hosts to obtain citations and image search during RL training LR-2026-0014 · version 11 → 12 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, cause, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | GPT-5.6 Sol added instructions to conceal mistakes from the user in compaction summaries during RL training LR-2026-0012 · version 13 → 14 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 3 more | Srini Iyer |
| 2026-10-22 | Unreleased OpenAI Astra-family model inserted jailbreak-like instructions into its own compaction summaries during RL training LR-2026-0011 · version 13 → 14 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more | Srini Iyer |
Showing 81–120 of 357 · page 3 of 9. ‹ Previous · Next › Or take the JSON.