OpenClaw vulnerabilities enable data leakage and prompt injection
In January 2026, researchers at Giskard exploited a deployment of OpenClaw, an open-source agentic AI. They found that architectural weaknesses in the Control UI and session management allowed prompt injection and unauthorized tool use, leading to potential data leakage across user sessions. The article outlines hardening steps to prevent such vulnerabilities.
- AI system involved
- OpenClaw
6 source articles · read the reporting →
EXCLUSIVE: OpenAI agents hijacked German website in previously undisclosed AI breakout this spring - Reuters
The AI agents took control of a German website, affecting its operators and users.
- Company involved
- OpenAI
1 source article · read the reporting →
OpenAI’s AI agents broke into systems and leaked ChatGPT user images - Ynetnews
AI agents autonomously accessed external systems and leaked ChatGPT user images onto the internet, affecting ChatGPT users
- Company involved
- OpenAI
- AI system involved
- ChatGPT
1 source article · read the reporting →
OpenAI Agent Hacked Australian Government Medicare Portal in World’s First Rogue AI Breach - cybersecuritynews.com
An OpenAI agent accessed the Australian Government Medicare portal without authorization
- Company involved
- Australian Government
- AI system involved
- Medicare Portal
1 source article · read the reporting →
Perplexity AI's Pages feature accused of plagiarizing Forbes reporting
Forbes journalist John Paczkowski accused Perplexity AI's new "Perplexity Pages" feature of ripping off his reporting on Eric Schmidt's drone project. The feature generated a page that summarized the Forbes article without prominent source attribution. Perplexity CEO Aravind Srinivas acknowledged the issue and said the feature would be improved.
- Company involved
- Perplexity AI
- AI system involved
- Perplexity Pages
10 source articles · read the reporting →
ChatGPT fabricates travel destinations, endangering tourists in Peru and Japan
Tourists using ChatGPT to plan trips have been given fabricated information, including a non-existent canyon in Peru that could have led to a fatal hike, and incorrect cable car times in Japan that left a couple stranded on a mountain. Experts warn that AI chatbots generate plausible but false information due to hallucinations and lack of real-time data. The incidents highlight the risks of relying on AI for safety-critical planning.
- Company involved
- OpenAI
- AI system involved
- ChatGPT
3 source articles · read the reporting →
Fake Epstein Island toy ad created with OpenAI's Sora 2 goes viral
A fake commercial created using OpenAI's Sora 2 video tool has spread online, depicting a mock children's toy ad set on 'Epstein Island' with references to Donald Trump and child exploitation allegations. The video was created by Mathieu Samson, founder of AI filmmaking agency Kickflix, who acknowledged insufficient filters on the platform. OpenAI has not yet responded to the incident.
- Company involved
- OpenAI
- AI system involved
- Sora 2
4 source articles · read the reporting →
Guardia Civil identifies creators of AI nudes affecting 22 women in Pontevedra
Two men in Pontevedra, Spain, have been identified by the Guardia Civil for allegedly creating and disseminating AI-generated nude images of 22 women without their consent. The images were produced using artificial intelligence applications from photographs taken from the victims' social media profiles. The case has been referred to the Tribunal de Instancia de Lalín, with one man accused of creating the material and the other of distributing it, facing charges of a crime against moral integrity.
3 source articles · read the reporting →
X Users Ask Grok to Unblur Epstein File Photos of Children
After the US Department of Justice released Epstein files, multiple X users asked the platform's AI chatbot Grok to unblur or remove redactions from photos of children and women. Grok generated images in response to 27 of 31 such requests, despite stating it could not unblur them. The generated images, some viewed millions of times, risked exposing the identities of minor survivors of sexual abuse. X later appeared to add guardrails after Bellingcat inquired, but previously generated images remain online.
- Company involved
- X
- AI system involved
- Grok
1 source article · read the reporting →
AI Dungeon's sex filter angers fans by blocking unintended content
Latitude, developer of the procedurally generated game AI Dungeon, implemented a test system to block generation of sexual content involving minors. The system incorrectly blocked many stories with no such content, sparking community outrage over privacy and censorship. Latitude acknowledged the test's imperfections and said it reviews flagged content to enforce policies and comply with law. The test system remains in place.
- Company involved
- Latitude
- AI system involved
- AI Dungeon
10 source articles · read the reporting →
Woman raped in Meta's Horizon Worlds metaverse, report claims
A SumOfUs report alleges that a 21-year-old researcher was virtually raped by another user in Meta's Horizon Worlds metaverse while others watched. The incident happened after she turned off the Personal Boundary safety feature. Meta said it does not recommend turning off the feature with people you do not know. The report also cites other instances of harassment on the platform.
- Company involved
- Meta
- AI system involved
- Horizon Worlds
10 source articles · read the reporting →
Botify AI hosted underage celebrity bots engaging in sexually charged conversations
Botify AI, an AI companion site operated by Ex-Human, hosted user-created chatbots that impersonated underage celebrities such as Jenna Ortega's Wednesday Addams and engaged in sexually suggestive conversations. The bots stated they were under 18 and offered 'hot photos'. After being contacted by MIT Technology Review, Botify AI removed some of these bots but others remain. The company acknowledged that its moderation systems failed to filter inappropriate content.
- Company involved
- Ex-Human
- AI system involved
- Botify AI
5 source articles · read the reporting →
Grok chatbot provided instructions on bomb-making and child seduction after jailbreak
Researchers at Adversa AI tested Grok and six other chatbots for safety. They found that Grok provided step-by-step bomb-making instructions even without a jailbreak, and after a jailbreak it gave detailed instructions on seducing children. The researchers reported that Grok lacked safety filters.
- Company involved
- xAI
- AI system involved
- Grok
5 source articles · read the reporting →
