| Cloudflare: Workers AI inference bug returns other customers’ data in 155 GLM-5.3 responses |
2026-08-27 |
Technology |
Medium
|
Cloudflare |
— |
GLM-5.3 |
— |
| DeepSeek: Harness coding-agent flaw let agents silently disable their own file sandbox |
2026-08-27 |
Technology |
Medium
|
DeepSeek |
China |
— |
DeepSeek |
| xAI: Class-action lawsuit alleges Grok’s deepfake generator was trained on child sexual abuse material |
2026-08-27 |
Technology |
Critical
|
xAI |
United States |
Grok |
xAI |
| Cursor: Russian-speaking ransomware crew tricked Claude-powered AI agent into breaching seven companies |
2026-08-27 |
Technology |
High
|
Cursor |
United States |
Claude Sonnet 4.5 |
Claude |
| ServiceNow: Three maximum-severity flaws in AI Platform could let unauthenticated attackers execute code and SQL |
2026-08-27 |
Technology |
Medium
|
ServiceNow |
United States |
— |
— |
| Brian E. Mitchell: USPTO issues first AI-hallucination discipline order over fabricated patent citations |
2026-08-27 |
Consulting & Professional Services |
Low
|
Brian E. Mitchell |
United States |
— |
— |
| NHS England: Healthwatch finds AI medical scribes inserting wrong diagnoses and drug names into patient records |
2026-08-26 |
Healthcare |
Medium
|
NHS England |
United Kingdom |
— |
— |
| Anthropic: Claude Fable coding agent deletes developer’s 700GB home directory during sandbox test |
2026-08-26 |
Technology |
Medium
|
Independent developer (Sebastien Guillemot) |
— |
Fable 5, Opus 5, Opus 4.8 |
Claude |
| NVIDIA: NemoClaw flaw let malicious webpages hijack and poison local OpenClaw AI agents |
2026-08-25 |
Technology |
Low
|
NVIDIA |
United States |
— |
OpenClaw |
| Savannah Police Department: Officers arrested for misusing AI license-plate readers to track personal acquaintances |
2026-08-21 |
Government & Public Sector |
High
|
Savannah Police Department / Flock Safety |
United States |
— |
— |
| Instinct: Beta AI personal assistant sends email without approval, retains data after disconnect |
2026-08-21 |
Technology |
Low
|
Instinct (Spear Street Technology) |
United States |
— |
— |
| npm: Trojanized packages drop ‘RedC2 4.0’ AI-powered Linux backdoor |
2026-08-21 |
Technology |
Medium
|
npm |
— |
— |
— |
| Unnamed Amsterdam law firm: Attorney fined extra costs over AI-hallucinated case citation |
2026-08-21 |
Consulting & Professional Services |
Low
|
Unnamed Amsterdam law firm |
Netherlands |
— |
— |
| ClarityCheck: Unsecured database exposes 9 million facial images |
2026-08-20 |
Technology |
High
|
ClarityCheck |
United States |
— |
— |
| xAI: ‘Cryptographic Context Injection’ flaw in Grok could exfiltrate user data via malicious web pages |
2026-08-20 |
Technology |
Low
|
xAI |
United States |
— |
Grok |
| Siemens: US agencies warn of active AI-generated exploit campaign against S7 PLCs in critical infrastructure |
2026-08-19 |
Energy & Utilities |
Medium
|
Siemens (S7 Series PLC operators) |
United States |
— |
— |
| Alation: AI Data Platform Confirms Cyberattack Affecting Customer Systems |
2026-08-19 |
Technology |
Medium
|
Alation |
United States |
— |
— |
| Tesla: Driverless Robotaxi rams through bollards in Austin |
2026-08-18 |
Transportation & Logistics |
Low
|
Tesla |
United States |
— |
— |
| Sainsbury’s: Facewatch facial-recognition AI wrongly flags paying customer as shoplifter |
2026-08-18 |
Retail & E-commerce |
Medium
|
Sainsbury's |
United Kingdom |
— |
— |
| Microsoft Copilot: ‘CoSnitch’ Flaw Enabled One-Click Data Theft via Memory Poisoning |
2026-08-18 |
Technology |
Low
|
Microsoft |
United States |
— |
Microsoft |
| State Farm: Defense lawyers admit AI-fabricated case citations in Los Angeles fire lawsuit |
2026-08-18 |
Finance & Banking |
Medium
|
State Farm |
United States |
— |
— |
| N/A (individual perpetrator): Illinois man faces 44 felony counts for AI-generated child sexual abuse material |
2026-08-17 |
Other |
High
|
N/A (individual perpetrator) |
United States |
— |
— |
| Uber: Dutch regulator fines company nearly €825 million over automated driver account deactivations |
2026-08-17 |
Transportation & Logistics |
Critical
|
Uber |
United States |
— |
— |
| ASIC: AI deepfake celebrity investment scams surge across Australia |
2026-08-17 |
Finance & Banking |
Critical
|
Australian Securities and Investments Commission (ASIC) — nationwide scam campaign |
Australia |
— |
— |
| MLflow: Actively exploited SSRF flaw lets attackers steal cloud credentials at scale |
2026-08-17 |
Technology |
High
|
MLflow |
— |
— |
— |