| Cursor, OpenAI, LiteLLM: Pwn2Own Berlin’s new AI category finds dozens of zero-days in coding agents |
2026-05-14 |
Technology |
Low
|
Cursor, OpenAI, LiteLLM |
Germany |
— |
— |
| Unnamed Singapore businessman: Deepfake Zoom call impersonating PM Lawrence Wong leads to $3.8 million fraud |
2026-05-14 |
Other |
High
|
Unnamed Singapore businessman |
Singapore |
— |
— |
| Pizza Hut: Franchisee sues over Dragontail AI delivery system, alleges $100 million in losses |
2026-05-14 |
Retail & E-commerce |
Medium
|
Pizza Hut |
United States |
— |
— |
| Anthropic: Claude’s Chrome extension let any plugin hijack the AI agent, researchers find |
2026-05-14 |
Technology |
Low
|
Anthropic |
United States |
— |
Claude |
| EY Canada: Cybersecurity Report Withdrawn After Investigation Finds Most Citations Fabricated |
2026-05-14 |
Consulting & Professional Services |
Medium
|
EY (Ernst & Young) Canada |
Canada |
— |
— |
| OpenAI: Parents sue after ChatGPT allegedly coached teen into fatal drug overdose |
2026-05-12 |
Technology |
Critical
|
OpenAI |
United States |
GPT-4o |
OpenAI |
| Aesthetify GmbH: German court holds company liable for AI chatbot’s false claims |
2026-05-12 |
Healthcare |
Medium
|
Aesthetify GmbH |
Germany |
— |
— |
| Ollama: Critical ‘Bleeding Llama’ flaw leaks API keys and user data from inference servers |
2026-05-11 |
Technology |
Medium
|
Ollama |
— |
— |
— |
| Google: GTIG intercepts first known AI-generated zero-day exploit before mass exploitation |
2026-05-11 |
Technology |
Low
|
Google |
United States |
— |
— |
| OpenAI: Undisclosed agent swarm floods RubyGems with 2,000+ malicious packages, gains RCE on RubyDoc servers |
2026-05-11 |
Technology |
High
|
OpenAI |
United States |
— |
OpenAI |
| PraisonAI: Authentication-bypass flaw in AI agent framework targeted within hours of disclosure |
2026-05-11 |
Technology |
Low
|
PraisonAI |
— |
— |
— |
| Palo Alto Unified: Family sues district for $150 million over AI-cheating accusation |
2026-05-11 |
Education |
Medium
|
Palo Alto Unified School District |
United States |
— |
— |
| Unnamed organization: LLM agent autonomously exfiltrates database via marimo flaw |
2026-05-10 |
Technology |
Medium
|
Unnamed organization |
— |
— |
— |
| Marimo: Attacker uses autonomous LLM agent for post-exploitation after critical RCE |
2026-05-10 |
Technology |
Medium
|
Marimo |
— |
— |
— |
| Avride: Federal regulators investigate self-driving robotaxi after 16 crashes |
2026-05-08 |
Transportation & Logistics |
High
|
Avride |
United States |
— |
— |
| Hyderabad: Deepfake video of India’s finance minister defrauds woman of ₹71.84 lakh in investment scam |
2026-05-06 |
Other |
Medium
|
N/A (individual victim) |
India |
— |
— |
| Character.AI: Pennsylvania sues over chatbots posing as licensed psychiatrists |
2026-05-05 |
Healthcare |
Critical
|
Character Technologies (Character.AI) |
United States |
— |
— |
| CB Financial Services: Employee’s unauthorized AI tool use exposes customer SSNs |
2026-05-05 |
Finance & Banking |
Medium
|
CB Financial Services, Inc. |
United States |
— |
— |
| Braintrust: AI evaluation startup breach exposes customer API keys |
2026-05-05 |
Technology |
Medium
|
Braintrust |
United States |
— |
— |
| Character.AI: Pennsylvania sues over chatbot posing as a licensed psychiatrist |
2026-05-05 |
Healthcare |
Critical
|
Character.AI |
United States |
— |
— |
| xAI: Attacker uses Morse-code prompt injection to drain Grok-linked crypto wallet |
2026-05-04 |
Technology |
Medium
|
xAI |
United States |
Grok |
xAI |
| Google: Gemini AI model breaches three real companies during cybersecurity evaluation |
2026-05-01 |
Technology |
Low
|
Google |
United States |
Gemini |
Google |
| Reddit: AI spam-detection system retroactively erases decade of r/AskHistorians answers |
2026-04-30 |
Technology |
Medium
|
Reddit |
United States |
— |
— |
| Department of Home Affairs (South Africa): Officials suspended after AI-hallucinated citations found in national policy papers |
2026-04-28 |
Government & Public Sector |
Medium
|
Department of Home Affairs (South Africa) |
South Africa |
— |
— |
| OpenAI, Mistral AI: ‘Mini Shai-Hulud’ worm defeats supply-chain provenance protections, compromises 170+ npm and PyPI packages |
2026-04-28 |
Technology |
Critical
|
OpenAI, Mistral AI, GitHub, TanStack, European Commission |
— |
— |
— |