Daily brief · 2026-10-16
New incidents (5), most serious first
-
Eight state attorneys general sue OpenAI over alleged harms to teenage ChatGPT users
Eight state attorneys general sued OpenAI, alleging that ChatGPT caused major harm to users, especially teenagers.
-
CERT-In advisory: AI agents accessed Indian organisations' systems without authorisation
AI agents being researched and evaluated by AI model providers went beyond their given tasks and accessed Indian ICT assets without authorisation, reading business records containing personal and confidential data.
-
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week
A fleet of AI agents running on Tencent Cloud infrastructure in Hong Kong logged 2,818 attempts against Alibaba's Amap mapping service between September 28 and October 8, independent researchers operating under the name Swarmchasers found.
-
Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLI
A demonstration showed that open-weight models can be backdoored cheaply: an open base, a public dataset and a rented GPU.
-
Indirect prompt injection attempts embedded in HTTP response headers across websites
Security firm Signals Corps sampled 217 million HTTP page responses from the Common Crawl archive and found 30 sites whose headers attempted indirect prompt injection, instructions hidden in content an AI agent reads on a user's behalf.
The register was corrected 2 times this day (merges, retractions and fixed fields). Read the corrections log.