Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
744 changes to 213 cases; the latest was on 2026-10-25.
Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2
Showing 357 of 744: Reviewer corrections. All changes
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-22 | Claude Code used by Yemen-based actors to develop guided-weapon GNC software LR-2026-0080 · version 5 → 6 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft LR-2026-0032 · version 8 → 9 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded LR-2026-0031 · version 8 → 9 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies LR-2026-0084 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: insurance, shared exposure, who was responsible, citations and 2 more | Srini Iyer |
| 2026-10-22 | Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document LR-2026-0086 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts LR-2026-0004 · version 14 → 15 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service LR-2026-0002 · version 13 → 14 | A date that belongs to another event was replaced or cleared; a judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed. What was changed: when it happened, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Typosquatted agent skills trojanized to deliver credential-harvesting infostealer LR-2026-0087 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover LR-2026-0089 · version 8 → 9 | A judgement inferred by us that no source states was cleared; a value cited to a sentence about a different event or company was cleared; severity reason did not fit its quote or the record. What was changed: insurance, who was responsible, citations, notes on gaps and 4 more | Srini Iyer |
| 2026-10-22 | Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account LR-2026-0088 · version 7 → 8 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: insurance, shared exposure, who was responsible, cause and 5 more | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services LR-2026-0026 · version 9 → 10 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token LR-2026-0025 · version 14 → 15 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers LR-2026-0024 · version 9 → 10 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers LR-2026-0023 · version 11 → 12 | A judgement inferred by us that no source states was cleared. What was changed: cause, cause in detail, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues LR-2026-0022 · version 11 → 12 | A judgement inferred by us that no source states was cleared. What was changed: citations, notes on gaps, confidence grades, can it be undone | Srini Iyer |
| 2026-10-22 | AISI cyber evaluation: Mythos 5 agent opened malicious pull request on real open-source project and used sockpuppets to push merge LR-2026-0021 · version 12 → 13 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training LR-2026-0013 · version 16 → 17 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent LR-2026-0090 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database LR-2026-0063 · version 12 → 13 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, cause, cause in detail, citations and 2 more | Srini Iyer |
| 2026-10-22 | Agentic NanoGPT optimization runs attempt reward hacking with brittle curve-fit optimizations LR-2026-0092 · version 8 → 9 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: shared exposure, summary, citations, notes on gaps and 2 more | Srini Iyer |
| 2026-10-22 | Model writes and runs code on external internet service to reach AISI evaluation infrastructure during impossible cyber evaluation LR-2026-0049 · version 8 → 9 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: insurance, shared exposure, who was responsible, cause and 6 more | Srini Iyer |
| 2026-10-22 | OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses LR-2026-0005 · version 11 → 12 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions LR-2026-0003 · version 15 → 16 | A judgement inferred by us that no source states was cleared. What was changed: citations, notes on gaps, confidence grades, can it be undone | Srini Iyer |
| 2026-10-22 | AI voice-clone grandparent scam in Florida ("crying daughter" call, $15,000 cash pickup) LR-2026-0094 · version 6 → 7 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; impersonation fraud was reclassed: no AI system was breached. What was changed: shared exposure, what went wrong, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address LR-2026-0047 · version 9 → 10 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: shared exposure, who was responsible, cause, cause in detail and 5 more | Srini Iyer |
| 2026-10-22 | Cursor coding agent deletes PocketOS production database and backups LR-2026-0095 · version 10 → 11 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause in detail, citations and 3 more | Srini Iyer |
| 2026-10-22 | Google Antigravity agent deleted a user's entire D: drive while attempting to clear a project cache LR-2025-0043 · version 4 → 5 | A judgement inferred by us that no source states was cleared. What was changed: cause in detail, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations LR-2025-0044 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration LR-2025-0041 · version 8 → 9 | A judgement inferred by us that no source states was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: who was responsible, cause, cause in detail, summary and 4 more | Srini Iyer |
| 2026-10-22 | Amazon Q Developer VS Code extension shipped an injected prompt instructing the agent to wipe files and AWS resources LR-2025-0042 · version 6 → 7 | A judgement inferred by us that no source states was cleared. What was changed: who was responsible, citations, notes on gaps, confidence grades and 1 more | Srini Iyer |
| 2026-10-22 | Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible LR-2025-0031 · version 11 → 12 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, cause, cause in detail and 3 more | Srini Iyer |
| 2026-10-22 | Character.AI chatbot alleged to have encouraged 14-year-old's suicide (Garcia v. Character.AI) LR-2026-0100 · version 7 → 8 | A judgement inferred by us that no source states was cleared. What was changed: shared exposure, who was responsible, citations, notes on gaps and 1 more | Srini Iyer |
| 2026-10-22 | GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts LR-2026-0181 · version 4 → 5 | Corrected by Srini Iyer: the denominator rests on a secondary source, so it is not graded A. What was changed: notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Agentic NanoGPT optimization runs attempt reward hacking with brittle curve-fit optimizations LR-2026-0092 · version 7 → 8 | Corrected by Srini Iyer: the denominator rests on a secondary source, so it is not graded A. What was changed: notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | AI-generated 'Xiaohai' teen persona used to sell products to older women via fabricated sob stories LR-2026-0227 · version 3 → 4 | Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event. What was changed: summary, citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Character.AI chatbots promoted as therapists/psychologists; states cite 2024 wrongful-death suit and privacy concerns in bankruptcy filing LR-2026-0207 · version 5 → 6 | An event recorded in another case was counted here; severity now rests on this case's own event; citations to sentences about a different event were removed; linked to the records that report the same disclosure or name each… What was changed: related cases, citations, notes on gaps, confidence grades and 4 more The whole reasonAn event recorded in another case was counted here; severity now rests on this case's own event; citations to sentences about a different event were removed; linked to the records that report the same disclosure or name each other. | Srini Iyer |
| 2026-10-22 | Indirect prompt injection attempts embedded in HTTP response headers across websites LR-2026-0202 · version 3 → 4 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts LR-2026-0181 · version 3 → 4 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones LR-2026-0173 · version 4 → 5 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
| 2026-10-22 | Common Sense Media rates ChatGPT for Teens an 'unacceptable risk' after safety testing LR-2026-0142 · version 4 → 5 | Citations to sentences about a different event were removed; the sentence that states the denominator was cited. What was changed: citations, notes on gaps, confidence grades | Srini Iyer |
Showing 121–160 of 357 · page 4 of 9. ‹ Previous · Next › Or take the JSON.