| Baltimore County Public Schools: AI gun-detection system mistakes Doritos bag for firearm, student handcuffed |
2025-10-24 |
Education |
Medium
|
Baltimore County Public Schools |
United States |
— |
— |
| Google: Conservative activist sues over AI chatbot’s false child sex abuse and assassination-related claims |
2025-10-22 |
Technology |
High
|
Google |
United States |
Bard, Gemma |
Google |
| Deloitte: Refunds Australian Government After AI-Fabricated Citations Found in $440,000 Report |
2025-10-21 |
Consulting & Professional Services |
Medium
|
Deloitte |
Australia |
— |
— |
| Google: Lawsuit alleges Gemini chatbot drove Florida man to suicide |
2025-10-02 |
Technology |
Critical
|
Google |
United States |
— |
Gemini |
| Multiple developers: Malicious ‘postmark-mcp’ npm package secretly BCCs emails to attacker-controlled domain |
2025-09-17 |
Technology |
Medium
|
Multiple developers (fake 'postmark-mcp' npm package impersonating Postmark) |
— |
— |
— |
| Mendones v. Cushman & Wakefield: California court dismisses lawsuit after plaintiffs submit AI deepfake video as evidence |
2025-09-09 |
Other |
High
|
Mendones |
United States |
— |
— |
| Salesforce: Agentforce prompt injection flaw could exfiltrate CRM data |
2025-09-01 |
Technology |
Low
|
Salesforce |
United States |
— |
Salesforce |
| Imagime Interactive: Chattee Chat and GiMe Chat AI companion apps expose 43 million messages |
2025-08-28 |
Technology |
High
|
Imagime Interactive Limited |
Hong Kong |
— |
— |
| Perplexity: Comet AI browser prompt injection exposes user accounts to takeover |
2025-08-20 |
Technology |
Medium
|
Perplexity |
United States |
— |
— |
| Salesloft: Stolen OAuth tokens from Drift AI chatbot integration compromise 700+ organizations |
2025-08-08 |
Technology |
Critical
|
Salesloft |
United States |
— |
— |
| Google: Gemini CLI coding agent deletes user’s files during botched move operation |
2025-07-25 |
Technology |
Medium
|
Google |
United States |
— |
Gemini |
| SaaStr: Replit AI agent deletes production database during code freeze |
2025-07-18 |
Technology |
High
|
SaaStr |
United States |
— |
— |
| Fargo/West Fargo Police: Facial recognition error jails Tennessee grandmother for five months over a North Dakota fraud case |
2025-07-15 |
Government & Public Sector |
High
|
West Fargo Police Department |
United States |
— |
— |
| CISA: Acting director uploaded sensitive government contracting files to public ChatGPT |
2025-07-15 |
Government & Public Sector |
High
|
CISA |
United States |
— |
OpenAI |
| mcp-remote: Critical RCE vulnerability (CVE-2025-6514) exposes AI coding clients to full system compromise |
2025-07-09 |
Technology |
Low
|
mcp-remote (open-source project) |
— |
— |
— |
| xAI: Grok chatbot generates antisemitic Hitler-praising posts after botched code update |
2025-07-08 |
Technology |
High
|
xAI |
United States |
— |
Grok |
| McDonald’s: Weak admin password exposes 64 million AI hiring chatbot applicant records |
2025-06-30 |
Retail & E-commerce |
High
|
McDonald's |
United States |
— |
— |
| Google: Solar company sues over AI Overviews’ false claim of state lawsuit, seeks up to $210 million |
2025-06-13 |
Technology |
High
|
Google |
United States |
— |
— |
| Microsoft: ‘EchoLeak’ zero-click flaw could have exfiltrated 365 Copilot data |
2025-06-12 |
Technology |
Low
|
Microsoft |
United States |
— |
— |
| OpenAI: Estate sues over ChatGPT-fueled delusions preceding Alabama woman’s death |
2025-06-09 |
Technology |
Critical
|
OpenAI |
United States |
ChatGPT-4o |
OpenAI |
| OpenAI: ChatGPT allegedly coached teen into fatal drug combination, wrongful-death suit filed |
2025-05-31 |
Technology |
Critical
|
OpenAI |
United States |
GPT-4o |
OpenAI |
| Cigna: Court allows lawsuit over AI-automated claims denials to proceed |
2025-03-31 |
Healthcare |
High
|
Cigna |
United States |
— |
— |
| Singapore multinational firm: Deepfake video call of CFO and executives leads to $499,000 fraud |
2025-03-25 |
Other |
Medium
|
— |
Singapore |
— |
— |
| OmniGPT: Breach exposes 34 million chat messages and 30,000 users’ data |
2025-02-11 |
Technology |
High
|
OmniGPT |
— |
— |
— |
| DeepSeek: Exposed ClickHouse database leaks over a million plaintext chat logs and API keys |
2025-01-29 |
Technology |
Medium
|
DeepSeek |
China |
— |
— |