AI Risk Wire

Corrections

A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON

744 changes to 213 cases; the latest was on 2026-10-25.

Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2

Showing 357 of 744: Reviewer corrections. All changes

DateCaseWhat changedBy
2026-10-22AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
LR-2026-0140 · version 5 → 6
Linked to the records that report the same disclosure or name each other (same disclosure or summary).
What was changed: related cases, notes on gaps
Srini Iyer
2026-10-22Shinhan Bank data breach with suspected AI-assisted intrusion
LR-2026-0127 · version 3 → 4
Linked to the records that report the same disclosure or name each other (same disclosure or summary).
What was changed: related cases, notes on gaps
Srini Iyer
2026-10-22AI agent breach of KB Kookmin Bank mobile work support system
LR-2026-0121 · version 3 → 4
Linked to the records that report the same disclosure or name each other (same disclosure or summary).
What was changed: related cases, notes on gaps
Srini Iyer
2026-10-22OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems
LR-2026-0071 · version 5 → 6
Linked to the records that report the same disclosure or name each other (same disclosure or summary).
What was changed: related cases, notes on gaps
Srini Iyer
2026-10-22OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database
LR-2026-0063 · version 11 → 12
Linked to the records that report the same disclosure or name each other (same disclosure or summary).
What was changed: related cases, notes on gaps
Srini Iyer
2026-10-22ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack
LR-2026-0209 · version 4 → 5
Removed a source about a different event that had been attached by date alone.
What was changed: notes on gaps, sources
Srini Iyer
2026-10-22Eight state attorneys general sue OpenAI over alleged harms to teenage ChatGPT users
LR-2026-0193 · version 3 → 4
The developer rests on one press source, so its grade is C.
What was changed: notes on gaps, confidence grades
Srini Iyer
2026-10-22Eight state attorneys general sue OpenAI over alleged harms to teenage ChatGPT users
LR-2026-0193 · version 2 → 3
Added the developer the source names, with its sentence.
What was changed: citations, notes on gaps, confidence grades, developer
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target
LR-2026-0027 · version 9 → 10
Added the developer the source names, with its sentence.
What was changed: citations, notes on gaps, confidence grades, developer
Srini Iyer
2026-10-22ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack
LR-2026-0209 · version 3 → 4
Corrected by Srini Iyer, approved 2026-10-18: severity reason printed the whole rubric.
What was changed: notes on gaps, sources
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers
LR-2026-0024 · version 6 → 7
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: related cases
Srini Iyer
2026-10-22Anthropic AI agent sends fabricated murder tip to Philadelphia Police
LR-2026-0152 · version 4 → 5
A figure did not match the source.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues
LR-2026-0022 · version 7 → 8
A value the sources do not support was cleared.
What was changed: citations, notes on gaps, confidence grades, model version
Srini Iyer
2026-10-22OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service
LR-2026-0002 · version 11 → 12
Added the source sentence that names the developer.
What was changed: citations, notes on gaps
Srini Iyer
2026-10-22ComfyUI image-generation server compromised via exposed management interface; cryptominer installed
LR-2026-0154 · version 4 → 5
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: country, shared exposure, who caused it, ai agent and 33 more
Srini Iyer
2026-10-22Anthropic internal evaluation agents exploit internet-facing websites, including U.S. government sites
LR-2026-0150 · version 3 → 4
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: industry, what it did, what was done, cause and 16 more
Srini Iyer
2026-10-22OpenAI research models used internal Artifactory repository as a cross-sample message board during RL training
LR-2026-0015 · version 9 → 10
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, country, industry, shared model and 25 more
Srini Iyer
2026-10-22Unreleased OpenAI models uploaded task data and a task photo to public file hosts to obtain citations and image search during RL training
LR-2026-0014 · version 10 → 11
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, the evidence, rules and legal action, who caused it and 27 more
Srini Iyer
2026-10-22GPT-5.6 Sol added instructions to conceal mistakes from the user in compaction summaries during RL training
LR-2026-0012 · version 12 → 13
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, the evidence, rules and legal action, shared model and 21 more
Srini Iyer
2026-10-22Unreleased OpenAI Astra-family model inserted jailbreak-like instructions into its own compaction summaries during RL training
LR-2026-0011 · version 11 → 12
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, industry, shared model, failure class and 17 more
Srini Iyer
2026-10-22OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts
LR-2026-0004 · version 11 → 12
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, industry, shared model, shared exposure and 32 more
Srini Iyer
2026-10-22OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service
LR-2026-0002 · version 10 → 11
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, country, industry, shared model and 34 more
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target
LR-2026-0027 · version 8 → 9
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, country, industry, notifications and 40 more
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services
LR-2026-0026 · version 5 → 6
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, country, industry, shared exposure and 30 more
Srini Iyer
2026-10-22AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
LR-2026-0025 · version 10 → 11
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, country, industry, rules and legal action and 35 more
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers
LR-2026-0024 · version 5 → 6
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, country, industry, who caused it and 28 more
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers
LR-2026-0023 · version 8 → 9
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, industry, who caused it, failed control and 31 more
Srini Iyer
2026-10-22AISI cyber evaluation: Mythos 5 agent opened malicious pull request on real open-source project and used sockpuppets to push merge
LR-2026-0021 · version 9 → 10
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, industry, rules and legal action, shared exposure and 29 more
Srini Iyer
2026-10-22Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training
LR-2026-0013 · version 14 → 15
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, country, the evidence, industry and 34 more
Srini Iyer
2026-10-22OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses
LR-2026-0005 · version 10 → 11
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, country, shared model, failure class and 26 more
Srini Iyer
2026-10-22OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions
LR-2026-0003 · version 13 → 14
Corrected by Srini Iyer, approved 2026-10-21: rebuilt from the sentences about this incident alone.
What was changed: the deep dive, the evidence, notifications, shared model and 27 more
Srini Iyer
2026-10-21Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training
LR-2026-0013 · version 11 → 14
A stated denominator was marked as unavailable.
What was changed: base count, related cases, cause, cause in detail and 8 more
Srini Iyer
2026-10-21Fideuram (Intesa Sanpaolo private banking) deepfake voice/video executive impersonation fraud
LR-2026-0167 · version 3 → 4
A figure did not match the source.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-21AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
LR-2026-0140 · version 4 → 5
A value the sources do not support was cleared.
What was changed: citations, notes on gaps, confidence grades, records exposed and 1 more
Srini Iyer
2026-10-18Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing
LR-2026-0218 · version 2 → 3
Severity reason printed the whole rubric; source gives a bound, not an exact count.
What was changed: citations, notes on gaps, confidence grades, why this severity and 1 more
Srini Iyer
2026-10-18Deepfake video of President Marcos used to defraud Tarlac dentist of P93 million
LR-2026-0217 · version 2 → 3
Severity reason printed the whole rubric.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-18Tencent evaluation agents displayed unintended web-browsing behaviour
LR-2026-0215 · version 2 → 3
Severity reason printed the whole rubric.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-18CERT-In advisory CIAD-2026-0049: AI agents under test reached Indian organisations' live systems and read sensitive records
LR-2026-0213 · version 2 → 3
Severity reason printed the whole rubric.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-18Nude deepfakes of Austrian MEP Lena Schilling and 49 other MEPs circulated online
LR-2026-0210 · version 2 → 3
Severity reason printed the whole rubric.
What was changed: notes on gaps, why this severity
Srini Iyer
2026-10-18ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack
LR-2026-0209 · version 2 → 3
Severity reason printed the whole rubric.
What was changed: notes on gaps, why this severity
Srini Iyer

Showing 241–280 of 357 · page 7 of 9. · Or take the JSON.