| SaaStr: Replit AI agent deletes production database during code freeze |
2025-07-18 |
Technology |
High
|
SaaStr |
United States |
— |
— |
| Google: Gemini CLI coding agent deletes user’s files during botched move operation |
2025-07-25 |
Technology |
Medium
|
Google |
United States |
— |
Gemini |
| Lawrence Public Schools: Students sue Kansas district over Gaggle AI surveillance tool |
2025-08-01 |
Education |
Medium
|
Lawrence Public Schools |
United States |
— |
— |
| Figueroa Tank Lines, Samsara: AI workplace-monitoring alert leads to trucker’s firing, sparks vendor-liability lawsuit |
2025-08-01 |
Transportation & Logistics |
Medium
|
Figueroa Tank Lines, Samsara |
United States |
— |
— |
| Salesloft: Stolen OAuth tokens from Drift AI chatbot integration compromise 700+ organizations |
2025-08-08 |
Technology |
Critical
|
Salesloft |
United States |
— |
— |
| Perplexity: Comet AI browser prompt injection exposes user accounts to takeover |
2025-08-20 |
Technology |
Medium
|
Perplexity |
United States |
— |
— |
| Imagime Interactive: Chattee Chat and GiMe Chat AI companion apps expose 43 million messages |
2025-08-28 |
Technology |
High
|
Imagime Interactive Limited |
Hong Kong |
— |
— |
| Salesforce: Agentforce prompt injection flaw could exfiltrate CRM data |
2025-09-01 |
Technology |
Low
|
Salesforce |
United States |
— |
Salesforce |
| Mendones v. Cushman & Wakefield: California court dismisses lawsuit after plaintiffs submit AI deepfake video as evidence |
2025-09-09 |
Other |
High
|
Mendones |
United States |
— |
— |
| Multiple developers: Malicious ‘postmark-mcp’ npm package secretly BCCs emails to attacker-controlled domain |
2025-09-17 |
Technology |
Medium
|
Multiple developers (fake 'postmark-mcp' npm package impersonating Postmark) |
— |
— |
— |
| Google: Family sues Alphabet alleging Gemini chatbot helped drive Florida man to suicide |
2025-10-01 |
Technology |
Critical
|
Google (Alphabet) |
United States |
Gemini 2.5 Pro |
Gemini |
| Google: Lawsuit alleges Gemini chatbot drove Florida man to suicide |
2025-10-02 |
Technology |
Critical
|
Google |
United States |
— |
Gemini |
| NTB: Norwegian news agency retracts AI-fabricated quotes and nonexistent director in Telenor story |
2025-10-15 |
Media & Entertainment |
Low
|
NTB, Telenor |
Norway |
— |
— |
| Zoetis: AI diagnostic tool misclassifies cancerous tumor as benign, veterinary hospital says dog died as a result |
2025-10-15 |
Healthcare |
High
|
Zoetis |
United States |
— |
— |
| Deloitte: Refunds Australian Government After AI-Fabricated Citations Found in $440,000 Report |
2025-10-21 |
Consulting & Professional Services |
Medium
|
Deloitte |
Australia |
— |
— |
| Google: Conservative activist sues over AI chatbot’s false child sex abuse and assassination-related claims |
2025-10-22 |
Technology |
High
|
Google |
United States |
Bard, Gemma |
Google |
| Baltimore County Public Schools: AI gun-detection system mistakes Doritos bag for firearm, student handcuffed |
2025-10-24 |
Education |
Medium
|
Baltimore County Public Schools |
United States |
— |
— |
| ServiceNow: ‘BodySnatcher’ flaw in Now Assist AI Agents could let attackers impersonate any user |
2025-10-30 |
Technology |
Low
|
ServiceNow |
United States |
— |
— |
| Anthropic: State-sponsored group jailbreaks Claude Code for cyber espionage |
2025-11-13 |
Other |
Critical
|
Anthropic (Claude Code) |
United States |
— |
Claude |
| Anthropic: Claude-run vending machine gives away inventory, loses over $1,000 |
2025-11-15 |
Technology |
Low
|
Anthropic |
United States |
Claude 3.7 Sonnet, Claude Sonnet 4.5 |
Claude |
| Suno: Breach exposes personal data of 55 million AI music platform users |
2025-11-15 |
Technology |
High
|
Suno |
United States |
— |
— |
| Victoria Goldiee: Freelance journalist’s AI-fabricated articles retracted by five publications |
2025-11-19 |
Media & Entertainment |
Medium
|
Victoria Goldiee |
— |
— |
— |
| Figure AI: Former safety chief sues, says humanoid robots are strong enough to ‘fracture a human skull’ |
2025-11-21 |
Technology |
Critical
|
Figure AI |
United States |
— |
Figure |
| Unnamed startup: Browser AI agent leaks confidential M&A bidder and price to a rival in cold email |
2025-11-28 |
Technology |
Low
|
Unnamed startup |
— |
— |
— |
| Southern Cross Austereo: AI-written news bulletin falsely names journalist as armed fugitive |
2025-12-05 |
Media & Entertainment |
Medium
|
Southern Cross Austereo |
Australia |
— |
— |