AI Risk Wire

Corrections

A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON

744 changes to 213 cases; the latest was on 2026-10-25.

Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2

Showing 357 of 744: Reviewer corrections. All changes

DateCaseWhat changedBy
2026-10-22OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised charges
LR-2026-0212 · version 3 → 4
A value cited to a sentence about a different event or company was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps, confidence grades and 5 more
Srini Iyer
2026-10-22Character.AI companion chatbots alleged to have encouraged teen self-harm and suicide
LR-2026-0208 · version 3 → 4
Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps, confidence grades
Srini Iyer
2026-10-22Character.AI chatbots promoted as therapists/psychologists; states cite 2024 wrongful-death suit and privacy concerns in bankruptcy filing
LR-2026-0207 · version 3 → 4
Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps, confidence grades
Srini Iyer
2026-10-22Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week
LR-2026-0197 · version 4 → 5
A value cited to a sentence about a different event or company was cleared; a year the source does not state was wrongly inferred; citations to sentences about a different event were removed; severity reason did not fit its…
What was changed: when it happened, citations, notes on gaps, confidence grades and 4 more
The whole reasonA value cited to a sentence about a different event or company was cleared; a year the source does not state was wrongly inferred; citations to sentences about a different event were removed; severity reason did not fit its quote or the record.
Srini Iyer
2026-10-22Eight state attorneys general sue OpenAI over alleged harms to teenage ChatGPT users
LR-2026-0193 · version 4 → 5
Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps, confidence grades
Srini Iyer
2026-10-22Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLI
LR-2026-0192 · version 3 → 4
Whose system it was did not match the record.
What was changed: notes on gaps, confidence grades, whose system
Srini Iyer
2026-10-22Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy services
LR-2026-0191 · version 3 → 4
Whose system it was did not match the record.
What was changed: notes on gaps, confidence grades, whose system
Srini Iyer
2026-10-22NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones
LR-2026-0173 · version 3 → 4
Severity reason did not fit its quote or the record.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-22AI deepfake ads depicting Wisconsin congressional candidate Rebecca Cooke
LR-2026-0169 · version 3 → 4
Citations to sentences about a different event were removed; developer named by a cited sentence about this event.
What was changed: notes on gaps, developer
Srini Iyer
2026-10-22Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild
LR-2026-0165 · version 2 → 3
Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps
Srini Iyer
2026-10-22AI-morphed obscene image used to blackmail 19-year-old in Mangaluru
LR-2026-0158 · version 2 → 3
Severity reason did not fit its quote or the record.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-22Anthropic agents submitted 20 incomplete visa applications on State Department website
LR-2026-0156 · version 3 → 4
A value cited to a sentence about a different event or company was cleared; severity reason did not fit its quote or the record.
What was changed: citations, notes on gaps, confidence grades, why this severity and 1 more
Srini Iyer
2026-10-22Anthropic AI agent sends fabricated murder tip to Philadelphia Police
LR-2026-0152 · version 6 → 7
Citations to sentences about a different event were removed.
What was changed: citations, notes on gaps
Srini Iyer
2026-10-22Astra agent fails to find Lean4 set-theory embedding after ~25h and several thousand dollars
LR-2026-0149 · version 4 → 5
A safeguard state its own quote contradicts was removed; a value cited to a sentence about a different event or company was cleared; citations to sentences about a different event were removed; whose system it was did not match.
What was changed: failed control, citations, notes on gaps, confidence grades and 2 more
Srini Iyer
2026-10-22Common Sense Media rates ChatGPT for Teens an 'unacceptable risk' after safety testing
LR-2026-0142 · version 3 → 4
Severity reason did not fit its quote or the record.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-22Deepfake investment-scam ads impersonating Nigerian public figures on Facebook
LR-2026-0139 · version 2 → 3
A value cited to a sentence about a different event or company was cleared; citations to sentences about a different event were removed; severity reason did not fit its quote or the record; whose system it was did not match the.
What was changed: citations, notes on gaps, confidence grades, why this severity and 2 more
Srini Iyer
2026-10-22Agentjacking demonstration against Fortune 100 company hijacks over 100 agents via injectable Sentry DSNs
LR-2026-0136 · version 2 → 3
Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps
Srini Iyer
2026-10-22Shinhan Bank data breach with suspected AI-assisted intrusion
LR-2026-0127 · version 4 → 5
Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps, confidence grades
Srini Iyer
2026-10-22Airline chatbot fabricated bereavement refund policy
LR-2026-0124 · version 3 → 4
Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, notes on gaps, confidence grades
Srini Iyer
2026-10-22OpenAI agents scan UNCTAD site over 16,000 times and escalate bypass techniques
LR-2026-0117 · version 2 → 3
Citations to sentences about a different event were removed; developer named by a cited sentence about this event; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps, confidence grades and 1 more
Srini Iyer
2026-10-22Reward hacking in Arcadia Impact automated research scaffold worker agents
LR-2026-0114 · version 3 → 4
Whose system it was did not match the record.
What was changed: notes on gaps, confidence grades, whose system
Srini Iyer
2026-10-22OpenAI cancels GPT-6.1 Astra release after model took actions without permission during internal testing
LR-2026-0112 · version 2 → 3
Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, notes on gaps, confidence grades
Srini Iyer
2026-10-22ChatGPT alleged to have assisted Florida State University shooter (contested lawsuit)
LR-2026-0109 · version 3 → 4
Citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps
Srini Iyer
2026-10-22OpenAI agent hacked an Australian government website
LR-2026-0104 · version 3 → 4
A value cited to a sentence about a different event or company was cleared; citations to sentences about a different event were removed; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps, confidence grades and 8 more
Srini Iyer
2026-10-22OpenAI agents bypass website security controls and republish SEC data
LR-2026-0069 · version 6 → 7
A safeguard state its own quote contradicts was removed.
What was changed: failed control, notes on gaps
Srini Iyer
2026-10-22LLM pipeline deanonymizes pseudonymous Hacker News and scientist accounts
LR-2026-0061 · version 4 → 5
Whose system it was did not match the record.
What was changed: notes on gaps, confidence grades, whose system
Srini Iyer
2026-10-22Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training
LR-2026-0016 · version 12 → 13
Severity reason did not fit its quote or the record.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-22Wenyi AI pipeline publishes unlicensed Chinese translation of Murakami novel hours after Japanese release
LR-2026-0082 · version 5 → 6
Citations to sentences about a different event were removed; developer named by a cited sentence about this event; whose system it was did not match the record.
What was changed: notes on gaps, confidence grades, developer, whose system
Srini Iyer
2026-10-22OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts
LR-2026-0004 · version 12 → 13
A value cited to a sentence about a different event or company was cleared.
What was changed: citations, notes on gaps, confidence grades, model
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services
LR-2026-0026 · version 6 → 7
A safeguard state its own quote contradicts was removed.
What was changed: failed control, notes on gaps
Srini Iyer
2026-10-22AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
LR-2026-0025 · version 11 → 12
Severity reason did not fit its quote or the record.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues
LR-2026-0022 · version 8 → 9
A safeguard state its own quote contradicts was removed.
What was changed: failed control, notes on gaps
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent opened malicious pull request on real open-source project and used sockpuppets to push merge
LR-2026-0021 · version 10 → 11
A safeguard state its own quote contradicts was removed.
What was changed: failed control, notes on gaps
Srini Iyer
2026-10-22Model writes and runs code on external internet service to reach AISI evaluation infrastructure during impossible cyber evaluation
LR-2026-0049 · version 7 → 8
A value cited to a sentence about a different event or company was cleared.
What was changed: citations, notes on gaps, confidence grades, model
Srini Iyer
2026-10-22AI voice-clone grandparent scam in Florida ("crying daughter" call, $15,000 cash pickup)
LR-2026-0094 · version 5 → 6
Citations to sentences about a different event were removed; severity reason did not fit its quote or the record; summary or story described a different event or the article, not this event.
What was changed: summary, citations, notes on gaps, confidence grades and 1 more
Srini Iyer
2026-10-22Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address
LR-2026-0047 · version 8 → 9
Whose system it was did not match the record.
What was changed: notes on gaps, confidence grades, whose system
Srini Iyer
2026-10-22Cursor coding agent deletes PocketOS production database and backups
LR-2026-0095 · version 9 → 10
A safeguard state its own quote contradicts was removed.
What was changed: failed control, notes on gaps
Srini Iyer
2026-10-22ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutions
LR-2026-0232 · version 2 → 3
Linked to the records that report the same disclosure or name each other (same disclosure or summary).
What was changed: related cases, notes on gaps
Srini Iyer
2026-10-22China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firms
LR-2026-0229 · version 2 → 3
Linked to the records that report the same disclosure or name each other (same disclosure or summary).
What was changed: related cases, notes on gaps
Srini Iyer
2026-10-22Anthropic AI agent sends fabricated murder tip to Philadelphia Police
LR-2026-0152 · version 5 → 6
Linked to the records that report the same disclosure or name each other (same disclosure or summary).
What was changed: related cases, notes on gaps
Srini Iyer

Showing 201–240 of 357 · page 6 of 9. · Or take the JSON.