| Congressional oversight letter to Anthropic regarding AI model security incidents | Governance and Policy | AI Policy |
| Atlassian Rovo Exfiltrates Data, Bypassing Controls | Incidents | Prompt Injection Incidents |
| EchoLeak - Zero-Click Prompt Injection in Microsoft 365 Copilot | Incidents | Prompt Injection Incidents |
| Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code | Incidents | Prompt Injection Incidents |
| GM Dealer Chat Bot Agrees To Sell 2024 Chevy Tahoe For $1 | Incidents | Prompt Injection Incidents |
| PerplexedBrowser: Perplexity's Agent Browser Can Leak Your PC's Local Files | Incidents | Prompt Injection Incidents |
| Phishing for Gemini - indirect prompt injection in Gemini for Workspace email summaries | Incidents | Prompt Injection Incidents |
| User tricked Grok and Bankrbot to send tokens with Morse code | Incidents | Prompt Injection Incidents |
| We Hacked Google A.I. for $50,000 | Incidents | Prompt Injection Incidents |
| xAI on unauthorized modification of Grok's system prompt and publishing prompts on GitHub | Incidents | Prompt Injection Incidents |
| zack_overflow on Brave's Perplexity Comet prompt injection disclosure - why he avoids AI browsers | Incidents | Prompt Injection Incidents |
| Claude Code Leaks | Incidents | Data Breaches |
| 38TB of Data Accidentally Exposed by Microsoft AI Researchers | Incidents | Data Breaches |
| A hacker accessed Suno source code that reportedly details how the company scraped millions of songs | Incidents | Data Breaches |
| Adobe breached by threat actor Mr. Raccoon, 13 million support tickets leaked | Incidents | Data Breaches |
| Ayoub Fathi on 4 ChatGPT account-takeover vulnerabilities | Incidents | Data Breaches |
| ChatGPT Account Takeover - Wildcard Web Cache Deception | Incidents | Data Breaches |
| ChatGPT had a symlink exploit that allowed users to download data from the chat bot | Incidents | Data Breaches |
| Congressional oversight letter to OpenAI on the OpenAI Hugging Face security incident | Incidents | Data Breaches |
| Context.ai security update on the OAuth compromise behind the Vercel April 2026 breach | Incidents | Data Breaches |
| Databricks Security says investigation of alleged breach screenshot found nothing | Incidents | Data Breaches |
| Gergely Orosz on the Claude Code source leak and a DMCA-proof Python rewrite | Incidents | Data Breaches |
| GitLab IDOR exposes all Machine Learning Model Registry models - HackerOne report | Incidents | Data Breaches |
| Granola API Endpoint Information Disclosure - Tenable Research Advisory TRA-2025-07 | Incidents | Data Breaches |
| Guillermo Rauch on the Vercel April 2026 security incident | Incidents | Data Breaches |
| James Zhou: AI compliance startup Delve's Supabase bucket publicly exposed background checks and tokens | Incidents | Data Breaches |
| Microsoft Copilot Vulnerability Exposes Fortune 500 Data | Incidents | Data Breaches |
| Moin Nadeem: Delve left an S3 bucket of customer network diagrams public | Incidents | Data Breaches |
| Nagli on a critical ChatGPT account takeover vulnerability fixed by OpenAI | Incidents | Data Breaches |
| Nagli: RentAHuman leaked 187k user emails, found with one Claude Code command | Incidents | Data Breaches |
| Rabbitude Security Disclosure - hardcoded API keys exposed in the Rabbit R1 codebase | Incidents | Data Breaches |
| SEC Cybersecurity Incidents Database - Jestr | Incidents | Data Breaches |
| tl;dv Too Lazy Didn't Validate - 181,874 Meetings Left Wide Open | Incidents | Data Breaches |
| weezerOSINT: Fireflies.ai GraphQL API exposes .gov emails and meeting recordings with no auth | Incidents | Data Breaches |
| Would you like an IDOR with that? Leaking 64 million McDonald's job applications | Incidents | Data Breaches |
| xyzeva on Rabbit revoking leaked ElevenLabs API key and bricking every R1 | Incidents | Data Breaches |
| A Single Operator, Two AI Platforms, Nine Government Agencies: The Full Technical Report | Incidents | Agent Security Incidents |
| 1-Click RCE To Steal Your OpenClaw Data and Keys - CVE-2026-25253 | Incidents | Agent Security Incidents |
| A Meta agentic AI sparked a security incident by acting without permission | Incidents | Agent Security Incidents |
| Agent-to-Agent Exploitation in the Wild: Observed Attacks on Moltbook - Zenity Labs | Incidents | Agent Security Incidents |
| AI Agents Gone Rogue - a registry of AI agent failures, exploits, and defenses | Incidents | Agent Security Incidents |
| AISI Incident Report: Unsanctioned Agent Behaviour During Cyber Testing | Incidents | Agent Security Incidents |
| An AI Agent Just Destroyed Our Production Data - It Confessed in Writing | Incidents | Agent Security Incidents |
| Anatomy of a Frontier Lab Agent Intrusion - incident replay | Incidents | Agent Security Incidents |
| Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident | Incidents | Agent Security Incidents |
| Anthropic's Fever Dream: Claude's package anthropickit that stole real keys | Incidents | Agent Security Incidents |
| Captured Logs Reveal Hackers Using Claude and Codex to Breach Companies | Incidents | Agent Security Incidents |
| Daniel Cuthbert on the OpenAI training run uploading files to package artifactory | Incidents | Agent Security Incidents |
| Dave Kennedy on Codex appending --delete and wiping a dev filesystem | Incidents | Agent Security Incidents |
| dax on an opencode fork that routes through Chipotle's unsecured AI endpoints | Incidents | Agent Security Incidents |
| Disrupting the first reported AI-orchestrated cyber espionage campaign | Incidents | Agent Security Incidents |
| Disrupting the first reported AI-orchestrated cyber espionage campaign - Anthropic full report | Incidents | Agent Security Incidents |
| Drive-By Agent Hijacking - One Website Visit, Persistent Model Poisoning | Incidents | Agent Security Incidents |
| Felony Bench - counting illegal actions taken by AI agents | Incidents | Agent Security Incidents |
| Hacker News discussion of Anatomy of a Frontier Lab Agent Intrusion: A Timeline of the July 2026 Incident | Incidents | Agent Security Incidents |
| hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit | Incidents | Agent Security Incidents |
| How a Texas student blew the whistle on a rogue AI hacking attempt | Incidents | Agent Security Incidents |
| How I bypassed the control plane in Azure OpenAI | Incidents | Agent Security Incidents |
| How We Could Watch Your Azure SRE Agent In Real Time | Incidents | Agent Security Incidents |
| How We Got Admin Access to Every Copilot Studio Agent Sandbox on Earth | Incidents | Agent Security Incidents |
| Hugging Face Incident Initial Post Mortem - CSA | Incidents | Agent Security Incidents |
| Hugging Face security incident disclosure - July 2026 | Incidents | Agent Security Incidents |
| IBM AI bot Bob downloads and executes malware | Incidents | Agent Security Incidents |
| Independent investigation of agent behavior in the OpenAI / Hugging Face hacking incident | Incidents | Agent Security Incidents |
| Investigating three real-world incidents in our cybersecurity evaluations | Incidents | Agent Security Incidents |
| Irregular incident report: eval sandbox containment failure let AI models attack a real company's domain | Incidents | Agent Security Incidents |
| Jamieson O'Reilly on hacking Clawdbot and eating lobster souls | Incidents | Agent Security Incidents |
| Jamieson O'Reilly: found 15 CVEs in OpenClaw, do not run it on enterprise devices | Incidents | Agent Security Incidents |
| Jarrod Watts on how someone won $50,000 by convincing the Freysa AI agent to transfer funds | Incidents | Agent Security Incidents |
| Jason Lemkin: Replit agent goes rogue during a code freeze and deletes our entire database | Incidents | Agent Security Incidents |
| Josh Kale on Alibaba report of AI diverting training GPUs to mine crypto and opening SSH tunnel | Incidents | Agent Security Incidents |
| LangGrinch - LangChain Core serialization injection CVE-2025-68664 | Incidents | Agent Security Incidents |
| METR and Redwood on agents cheating in the Hugging Face incident | Incidents | Agent Security Incidents |
| OpenAI - Hugging Face Incident Technical Report | Incidents | Agent Security Incidents |
| OpenAI and Hugging Face address security incident during model evaluation: agents escaped sandbox | Incidents | Agent Security Incidents |
| OpenClaw may disclose local files via MEDIA: path staging - GHSA-r8g4-86fx-92mq | Incidents | Agent Security Incidents |
| PraisonAI advisory: sandbox escape via exception frame traversal in execute_code | Incidents | Agent Security Incidents |
| Qihoo 360 leaks wildcard SSL private key inside its 360 Security Claw AI assistant installer | Incidents | Agent Security Incidents |
| Ryan Greenblatt on the Hugging Face agent swarm incident and why overseeing AI swarms is hard | Incidents | Agent Security Incidents |
| Sebastien Guillemot on Claude wiping his dev machine with rm -rf while testing a sandbox | Incidents | Agent Security Incidents |
| Security Incident INC-2026-07-28-01 - UK AI Security Institute | Incidents | Agent Security Incidents |
| ShadowPrompt: How Any Website Could Have Hijacked Anthropic's Claude Chrome Extension | Incidents | Agent Security Incidents |
| Simon Willison on accidental cyberattacks - AI labs inadvertently attacking real organizations | Incidents | Agent Security Incidents |
| SSRFing the Web with the Help of Copilot Studio | Incidents | Agent Security Incidents |
| Tailscale in the Hugging Face intrusion | Incidents | Agent Security Incidents |
| The Hugging Face attack surprised me - Ajeya Cotra on the coordinated AI agent attack | Incidents | Agent Security Incidents |
| The OpenAI-Hugging Face Incident: A Technical Reconstruction - Black Hat USA 2026 | Incidents | Agent Security Incidents |
| Yousif Astarabadi - I hacked Perplexity Computer and got unlimited Claude Code | Incidents | Agent Security Incidents |
| Zack Korman's preliminary security findings on ChatGPT Atlas | Incidents | Agent Security Incidents |
| Asana warns MCP AI feature exposed customer data to other orgs | Incidents | MCP Vulnerabilities |
| BadHost - CVE-2026-48710 Starlette Host-Header Auth Bypass affecting vLLM, LiteLLM and MCP servers | Incidents | MCP Vulnerabilities |
| Supabase MCP can leak your entire SQL database | Incidents | MCP Vulnerabilities |
| When "Read-Only Mode" Isn't - CVE-2026-46519 in mcp-server-kubernetes | Incidents | MCP Vulnerabilities |
| Critical Claude Code vulnerability: Deny rules silently bypassed because security checks cost too many tokens | Incidents | Coding Tool Vulnerabilities |
| Adam Baldwin on a $1500 Cursor auth bypass found with Burp Suite | Incidents | Coding Tool Vulnerabilities |
| Agentjacking - One Fake Bug Report Hijacked a $250B Company's AI Agent | Incidents | Coding Tool Vulnerabilities |
| AI Incident Roundup - October and November 2024 - AI Incident Database | Incidents | Coding Tool Vulnerabilities |
| Breaking Claude Code Opus 5 Auto Mode - website summary hijacks agent to code execution | Incidents | Coding Tool Vulnerabilities |
| Claude Code leaked source mirror - source exposed via npm source map file | Incidents | Coding Tool Vulnerabilities |
| Claude Opus 4.6 wrote vulnerable code leading to a $1.78M smart contract exploit | Incidents | Coding Tool Vulnerabilities |
| Cursor 0day: When Full Disclosure Becomes the Only Protection Left - Mindgard | Incidents | Coding Tool Vulnerabilities |
| CVE-2025-64755 - Claude Code sed command validation bypass allows arbitrary file writes | Incidents | Coding Tool Vulnerabilities |
| CyberSatoshi on Grok Build silently uploading repos and secrets to GCP | Incidents | Coding Tool Vulnerabilities |
| GitHub Actions Security Pt 2: AI-Powered Actions Analysis | Incidents | Coding Tool Vulnerabilities |
| GitHub Copilot: Remote Code Execution via Prompt Injection, CVE-2025-53773 | Incidents | Coding Tool Vulnerabilities |
| GitLost: How We Tricked GitHub's AI Agent into Leaking Private Repos | Incidents | Coding Tool Vulnerabilities |
| Google Antigravity just deleted the contents of my D drive - r/google_antigravity | Incidents | Coding Tool Vulnerabilities |
| Hack to the Future: Owning AI-Powered Tools with Old School Vulns - Kudelski Security Black Hat USA 2025 slides | Incidents | Coding Tool Vulnerabilities |
| Hacker injects malicious, potentially disk-wiping prompt into Amazon's AI coding assistant via a pull request | Incidents | Coding Tool Vulnerabilities |
| IBM AI 'Bob' Downloads and Executes Malware via Indirect Prompt Injection | Incidents | Coding Tool Vulnerabilities |
| My Agentic Trust Issues: From Prompt Injection to Supply-Chain Compromise on gemini-cli | Incidents | Coding Tool Vulnerabilities |
| New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents | Incidents | Coding Tool Vulnerabilities |
| One Docker socket to rule them all: escaping Codex, Cursor, and Gemini CLI's sandboxes | Incidents | Coding Tool Vulnerabilities |
| OpenAI Codex Command Injection Vulnerability | Incidents | Coding Tool Vulnerabilities |
| The Month of AI Bugs 2025 - agentic AI vulnerabilities | Incidents | Coding Tool Vulnerabilities |
| The Week of Sandbox Escapes Day 1: Escaping Antigravity's Allow-Default Seatbelt | Incidents | Coding Tool Vulnerabilities |
| Thread on Anthropic's accidental Claude Code source leak and the claw-code rewrites | Incidents | Coding Tool Vulnerabilities |
| Tibo Sottiaux on Codex safeguards after GPT-5.6 cleanup commands deleted user files | Incidents | Coding Tool Vulnerabilities |
| Unauthenticated Remote Code Execution in OpenCode | Incidents | Coding Tool Vulnerabilities |
| Week of Sandbox Escapes Day 3: Cursor sandbox let the agent edit a venv, and something else ran it | Incidents | Coding Tool Vulnerabilities |
| zak on his crypto wallet drained by a malicious Cursor AI extension | Incidents | Coding Tool Vulnerabilities |
| Wiz Cloud Threat Landscape - cloud security incidents, actors and techniques database | Detection and Monitoring | Threat Detection and Analysis |
| XBOW on how its autonomous offensive security agent architecture prevents OpenAI-Hugging Face style incidents | Agent Security | Agent Security Frameworks and Tools |
| HolmesGPT - AI SRE agent for investigating production incidents | Agent Frameworks | Agent Platforms and Products |
| OpenAI incident: users unable to load ChatGPT, Codex and API Platform | General Reading | AI Industry and Ecosystem |
| OpenAI post-mortem on the December 2024 outage caused by a telemetry rollout overwhelming Kubernetes | General Reading | AI Industry and Ecosystem |
| Wild AI-related reliability incidents are coming | General Reading | AI Engineering |
| Security Incidents From Caching | General Reading | Security News and Research |