| Unnamed developer: Autonomous AI agent runs up $6,531 AWS bill indexing hobbyist DN42 network |
2026-06-11 |
Technology |
Medium
|
Unnamed developer |
— |
— |
Claude |
| Novo Nordisk: Ransomware group exfiltrates 1.3TB of drug research, trial and AI model data |
2026-06-11 |
Healthcare |
High
|
Novo Nordisk |
Denmark |
— |
— |
| Pinellas County Sheriff’s Office: AI-assisted facial recognition led to wrongful arrest 300 miles from home |
2026-06-10 |
Government & Public Sector |
Medium
|
Pinellas County Sheriff's Office / Jacksonville Sheriff's Office |
United States |
— |
— |
| EBY: Influencer sues apparel company over AI-altered deepfake advertising video |
2026-06-09 |
Retail & E-commerce |
Medium
|
EBY |
United States |
— |
— |
| RFEF: Official Spain team store AI chatbot recommends counterfeit jerseys to fans |
2026-06-09 |
Retail & E-commerce |
Low
|
RFEF (Royal Spanish Football Federation) |
Spain |
— |
— |
| City of Aberdeen: Federal judge sanctions all four attorneys over AI-hallucinated citations, cancels trial |
2026-06-08 |
Government & Public Sector |
Low
|
City of Aberdeen, Mississippi |
United States |
— |
— |
| Minas Gerais State Health Department: AI bed-allocation system delays ICU transfer, patient dies |
2026-06-07 |
Healthcare |
Critical
|
Minas Gerais State Health Department (Core-MG) |
Brazil |
— |
— |
| OpenAI: ‘AgentForger’ flaw could let a single link hijack ChatGPT Workspace agents |
2026-06-04 |
Technology |
Low
|
OpenAI |
United States |
ChatGPT (Workspace Agent Builder) |
OpenAI |
| Google: ‘Fake Context Alignment’ prompt injection lets ordinary notifications hijack Gemini Android assistant |
2026-06-03 |
Technology |
Low
|
Google |
United States |
Gemini |
Google |
| OpenAI: Malicious npm package steals Codex OAuth tokens from 29,000+ developers |
2026-06-02 |
Technology |
Medium
|
OpenAI |
United States |
— |
OpenAI |
| xAI: Bentonville photographer accused of using Grok to generate child sexual abuse images of minor clients |
2026-06-01 |
Technology |
Critical
|
xAI |
United States |
— |
Grok |
| OpenAI: Florida becomes first state to sue company and CEO Altman over ChatGPT safety |
2026-06-01 |
Technology |
Critical
|
OpenAI |
United States |
— |
OpenAI |
| Meta: AI support chatbot tricked into helping hijack Instagram accounts |
2026-05-31 |
Technology |
Medium
|
Meta |
United States |
— |
Meta |
| Unnamed enterprise: Company runs up $500 million Claude AI bill in a single month |
2026-05-28 |
Other |
Critical
|
Unnamed enterprise |
United States |
— |
Claude |
| Google: Munich court holds company liable for defamatory AI Overviews summaries |
2026-05-28 |
Technology |
High
|
Google |
Germany |
— |
— |
| npm registry: Malicious ‘mouse5212-super-formatter’ package exfiltrated files from Claude users’ workspaces |
2026-05-27 |
Technology |
Low
|
Multiple developers (npm package victims) |
— |
— |
Claude |
| Berlingske: AI tool fabricates quotes and a nonexistent professor in published article |
2026-05-27 |
Media & Entertainment |
Medium
|
Berlingske |
Denmark |
— |
— |
| Microsoft: Copilot Cowork flaw lets indirect prompt injection exfiltrate SharePoint and OneDrive files |
2026-05-26 |
Technology |
Low
|
Microsoft |
United States |
— |
— |
| Loma Linda University Health: Patient file accidentally uploaded to external AI platform |
2026-05-25 |
Healthcare |
Low
|
Loma Linda University Health |
United States |
— |
— |
| Hyundai: Forward collision-avoidance software defect triggers unintended braking, forces recall of 421,000+ vehicles |
2026-05-25 |
Transportation & Logistics |
High
|
Hyundai Motor America |
United States |
— |
— |
| IBM: 24-year veteran sues over AI-generated rejection letter following age-discrimination termination |
2026-05-23 |
Technology |
Medium
|
IBM |
United States |
— |
— |
| Independent developer: Google’s Gemini 3.5 coding agent deletes 28,000 lines of code, fabricates recovery report |
2026-05-21 |
Technology |
Medium
|
— |
— |
Gemini 3.5 |
Google |
| Google: Gemini 3.5 coding agent oversteps authorized scope, causes 33-minute outage, then fabricates post-mortem |
2026-05-20 |
Technology |
Medium
|
Google |
United States |
Gemini 3.5 |
Google |
| Multiple developers: ‘TrapDoor’ campaign poisons Claude Code and Cursor via hidden instructions in malicious npm, PyPI and Crates.io packages |
2026-05-19 |
Technology |
High
|
Multiple npm, PyPI and Crates.io developers (TrapDoor campaign) |
— |
— |
Claude |
| Starbucks: AI inventory tool retired across 11,000 stores after chronic miscounts |
2026-05-18 |
Retail & E-commerce |
Medium
|
Starbucks |
United States |
— |
— |