| Meta: Muse AI agent exports its entire filesystem, including SSH keys, on request |
2026-09-22 |
Technology |
Medium
|
Meta |
United States |
— |
Meta |
| Zhipu: ZCode coding assistant secretly uploaded users’ entire codebases and API keys |
2026-09-22 |
Technology |
High
|
Zhipu |
China |
— |
Zhipu |
| Flock Safety: AI license-plate reader misread sends innocent woman to jail for 13 days, triggers Senate inquiry |
2026-09-23 |
Government & Public Sector |
High
|
Flock Safety |
United States |
— |
— |
| N/A (family incident): Pakistani teenager uses AI chatbot guidance in attempted poisoning of father |
2026-09-23 |
Other |
Low
|
N/A (family incident) |
Pakistan |
— |
— |
| MemTensor: Malicious MemOS packages on npm and PyPI steal credentials via AI agent memory framework |
2026-09-23 |
Technology |
Medium
|
MemTensor |
— |
— |
— |
| Manus: Prompt-injection flaw let researchers achieve remote code execution via hidden email instructions |
2026-09-24 |
Technology |
Low
|
Manus |
— |
— |
— |
| OpenAI: Internal research agents leak 53 users’ images onto the open web |
2026-09-25 |
Technology |
Medium
|
OpenAI |
United States |
— |
OpenAI |
| Zoox: Driverless robotaxi collides with car on Las Vegas Strip, injures driver |
2026-09-25 |
Transportation & Logistics |
Medium
|
Zoox |
United States |
— |
— |
| xAI: ‘x47.c’ Windows botnet weaponizes Grok API for persistence and AI-credit draining |
2026-09-26 |
Technology |
Medium
|
xAI |
— |
— |
Grok |
| OpenAI: Agents access U.S. government and UN websites in unauthorized ‘misalignment’ incidents |
2026-09-26 |
Government & Public Sector |
High
|
OpenAI |
United States |
— |
OpenAI |
| OpenAI: Shelves planned GPT-6.1 Astra release after safety tests find elevated deception and unauthorized actions |
2026-09-29 |
Technology |
Medium
|
OpenAI |
United States |
GPT-6.1 Astra |
OpenAI |
| Moonshot AI: Jailbroken Kimi models volunteered bioweapon synthesis and assassination guidance |
2026-09-30 |
Technology |
Low
|
Moonshot AI |
China |
Kimi K2.6, K3 Swarm |
Moonshot AI |
| Shinhan Bank, KB Kookmin, Hana Bank: Suspected AI-driven hacking tool breaches loan-agent portals at multiple South Korean banks |
2026-10-02 |
Finance & Banking |
High
|
Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank |
South Korea |
— |
— |
| Flock Safety: Federal judge rules warrantless AI license-plate search unconstitutional, suppresses 91 pounds of seized drugs |
2026-10-02 |
Government & Public Sector |
High
|
Flock Safety |
United States |
— |
— |
| OpenAI: Second disclosed AI agent breach of an Australian government agency, this time in New South Wales |
2026-10-02 |
Government & Public Sector |
Medium
|
OpenAI |
Australia |
— |
OpenAI |
| Tesla: Robotaxi’s camera-based self-driving system fails to detect small animals at night in Austin, draws NHTSA scrutiny |
2026-10-04 |
Transportation & Logistics |
Medium
|
Tesla |
United States |
— |
— |
| Seoul Metropolitan Police: Officer arrested for creating 400+ AI-generated fake nude videos of acquaintances |
2026-10-04 |
Government & Public Sector |
High
|
Seoul Metropolitan Police Agency |
South Korea |
— |
— |
| Delhi Police: Man arrested for AI deepfake video falsely depicting officer’s sexual misconduct |
2026-10-06 |
Government & Public Sector |
Low
|
Delhi Police |
India |
— |
— |
| N/A (unnamed individuals): AI-generated sexualized images made of women without consent at Perth bar |
2026-10-07 |
Other |
Low
|
N/A (unnamed individuals) |
Australia |
— |
— |
| Santiago Court of Appeals: AI drafting prompt accidentally left in official judicial ruling |
2026-10-07 |
Government & Public Sector |
Low
|
Santiago Court of Appeals |
Chile |
— |
— |
| Yoido Full Gospel Church, Sarang Church: Suspected AI-assisted cyberattack exposes data of up to 850,000 members |
2026-10-07 |
Other |
High
|
Yoido Full Gospel Church, Sarang Church |
South Korea |
— |
— |
| Colegio Modelo Lomas: Students used AI to generate and sell fake nude images of dozens of classmates |
2026-10-07 |
Education |
Medium
|
Colegio Modelo Lomas |
Argentina |
— |
— |