Cursor: AI incidents
What has gone wrong with AI systems, where, and how badly.
No rise: 0 in the last 7 days, against an average of 0 a week.
Major and severe incidents per week
No rise: 0 in the last 7 days, against an average of 0 a week.
Counted by the date each incident was reported, in 7-day weeks ending today. Collection began 2026-09-14; shaded weeks before it are undercounted. Every bar and number opens the incidents it counts.
All incidents
1 of 692 incidents, all dates
Risk groupings are set by a model from sentences quoted from each incident's sources. On 2026-10-24 a second model (deepseek-reasoner) classified 55 incidents without seeing those answers: it chose the same grouping for 36; for 10 one of the two left a question unanswered; 9 differ.
| Date reported | Incident | Risk | AI developer | Severity |
|---|---|---|---|---|
| 2026-07-17 | Cursor git.exe repo-poisoning zero-day patched without advisory or CVE Preliminary | AI used to run a cyber attack Security compromise | Cursor | major |
Browse incidents by
Risk grouping: Not yet classified · AI used to exploit · AI acting on its own · AI attacked · Misuse by its own users · AI failing in normal use · Harm by design · Supply chain attack
Kind of failure: Security compromise · Harmful output · Other kind · Operational error · Agent misalignment · Hallucination · Privacy leak · Physical safety · Bias or disparate impact · IP infringement
Developer: OpenAI · Anthropic · xAI · Tesla · Google · Meta · Microsoft · Waymo · DeepSeek · Facewatch · Perplexity · Alibaba · Amazon · Amazon Web Services · Baidu · Character Technologies · Character.AI · GitHub · Peter Steinberger · Zoox · Anthropic PBC · Apple · Atlassian · Aurelian · Avride · AWS · Bondu · Butterfly Effect · Character Technologies, Inc. · Cline · Codeway · Cognitec · Context.ai · Cursor · Deloitte · DreamX · Figure AI · Flock Safety · Hugging Face · Liquid AI · Lovable · McKinsey & Company · Moltbook · Moonshot AI · Nous Research · Perplexity AI Inc. · Replit · Salesforce · Shield AI · SpaceXAI · Tencent · Trezor · TypeSafe AI · Univerads Technology Limited · WhatsApp · Wiz · X.AI LLC · XBOW · Xiaomi · Z.AI · Z.ai (Zhipu AI) · Zoox Inc.
Model: Claude · Grok · ChatGPT · Gemini · Claude Code · GPT-4o · Mythos 5 · Codex · DeepSeek · GPT-5.6 Sol · Muse · Claude Opus 4.6 · Astra · ChatGPT Atlas · Claude Mythos 5 · Gemini 3.1 Pro · GLM-5.3 · Model Y
Agent or product: Claude Code · OpenClaw · ARTEX · Hermes Agent · ChatGPT · Codex · AI agent · Character.AI · Cursor · Gemini CLI · OpenAI agents · OpenAI Codex CLI
Tools it had: shell · browser · code_execution · email · file_write · bash · file_read · internet · network · python · internet_access · mythic · network_access · code_generation · exploitation · file_edit · file_upload · files · Google Workspace APIs · messaging · network scanning · package_install · reconnaissance · terminal · web search
How much it acted alone: Acted alone, unwatched · Acted alone, watched by a person · A person approved each action · It suggested; a person acted
Sector: Information · Finance and Insurance · automotive · education · Public administration · social media · law enforcement · government · Legal services · Software Publishers · artificial intelligence · Educational Services · Healthcare · Retail Trade · software development · banking · higher education · legal · news publishing · Retail · robotics · software-as-a-service · technology · transportation · Transportation and Warehousing · AI app-building software development platform · AI developer tools · AI model development / evaluation · AI platform / intermediary services · AI safety evaluation (government research) · AI safety research · anime streaming · Artificial intelligence research and development · Arts, Entertainment, and Recreation · Autonomous ride-hailing (robotaxi) · Autonomous vehicle / robotaxi transportation · autonomous vehicles · blockchain analysis / financial technology · Cloud computing · consulting · critical infrastructure and e-commerce · CRM software · cryptocurrency · Cybersecurity · decentralized finance (lending protocol) · Defense contracting · direct-to-consumer toilet paper deliveries · Emergency call centers (911 dispatch) · financial services · Fitness and recreational sports centers · Food Manufacturing · Government AI safety and security evaluation · government AI safety evaluation · Government and electric power · government contracting and immigration enforcement · grocery retail · hardware wallet manufacturing · Health Care and Social Assistance · Healthcare and government · Industrial automation, electronics manufacturing, semiconductors, pharmaceuticals, shipping, tire manufacturing, petrochemicals, and data center services · Information (software publishing / AI services) · Information Security research · Insurance · IT services (managed service providers) · live events ticketing · matrimonial services · military · news media · online gambling · online retail · Open knowledge platform / nonprofit encyclopedia · open source software · photography · Policing · political campaigns · professional services · Professional, Scientific, and Technical Services · Public administration and government · railway · real estate · religious organisation · Research and development in AI safety · Retail Trade; Transportation and Warehousing; Finance and Insurance · ride-hailing · Ride-hailing and autonomous vehicle passenger transport · Scientific research and light source user facility · short-video platform · Software / AI coding tools · Software development (AI vibe-coding platform) · Software development / information sector · Software development tools · Software publishing / npm ecosystem · Taxi and Limousine Service · theme parks · travel
Severity: moderate · major · minor · severe · negligible
Where it happened: In production · In evaluation · In research · In training