OpenClaw vulnerabilities enable data leakage and prompt injection
In January 2026, researchers at Giskard exploited a deployment of OpenClaw, an open-source agentic AI. They found that architectural weaknesses in the Control UI and session management allowed prompt injection and unauthorized tool use, leading to potential data leakage across user sessions. The article outlines hardening steps to prevent such vulnerabilities.
- AI system involved
- OpenClaw
6 source articles · read the reporting →
Hotel Guests Appeal Dismissal of Federal Price-Fixing Lawsuit Accusing Strip Casinos of Algorithmic Room Rate Collusion - Nevada Globe
Hotel guests allege that Las Vegas Strip casino operators used algorithmic pricing software that recommended inflated room rates, leading guests to pay supracompetitive prices. They are appealing the dismissal of their federal price-fixing suit.
- Company involved
- MGM Resorts International, Caesars Entertainment, Wynn Resorts, Treasure Island
- AI system involved
- Rainmaker Guestrev and Grouprev
1 source article · read the reporting →
Pankaj says his AI kitchen monitor caught the cook taking fruit and she was fired
Pankaj posted on X that he had set up an AI-powered kitchen monitor, using Claude Haiku 4.5 as its vision model, to watch his cook while she worked. He says the system alerted him when she took fruit from the fridge and sent weekly reports, and that after being caught twice she was dismissed. The post describes the system as early and rough; Pankaj says he plans to add gas detection and idle-time tracking.
- Company involved
- Pankaj
- AI system involved
- AI roommate
5 source articles · read the reporting →
AI chatbots recommended unlicensed casinos to UK users
An investigation by the Guardian and Investigate Europe found that five major AI chatbots—ChatGPT, Gemini, Grok, Microsoft Copilot, and Meta AI—recommended unlicensed online casinos to UK users. Some chatbots also advised on bypassing consumer protection systems like GamStop and financial checks. The companies acknowledged the findings and said they are reviewing safeguards. Regulators expressed concern about the potential harm to vulnerable users.
- Company involved
- Multiple technology companies (Microsoft, Google, Meta, OpenAI, X)
- AI system involved
- Copilot, Gemini, Meta AI, ChatGPT, Grok
5 source articles · read the reporting →
Expedia hit with antitrust class action over algorithm pricing scheme - Courthouse News
A class action alleges Expedia took part in an algorithmic pricing scheme that inflated hotel room prices for consumers booking through Expedia and other platforms.
- Company involved
- Expedia
1 source article · read the reporting →
Italian bank (Fideuram / Intesa Sanpaolo) loses about 95 million euro to AI voice-clone scam
The AI-generated voice deceived the chairman into authorizing transfers of about 95 million euros.
1 source article · read the reporting →
Expedia Accused of Using AI to Jack Up Hotel Room Rates - Bloomberg Law News
Set artificially inflated hotel room rates for consumers booking US hotel accommodations
- Company involved
- Expedia Group Inc.
1 source article · read the reporting →
Overnight, Meta deleted all her accounts. AI customer service won’t let her reach a human - CBC
Meta's AI moderation permanently disabled Jasmine Ault's Facebook and Instagram accounts, and AI customer service chatbots denied her appeal without human review.
- Company involved
- Meta
1 source article · read the reporting →
Airbnb bans users in Australia using trustworthiness algorithm
Airbnb is accused of using an algorithm acquired from Trooly to score users' trustworthiness based on publicly available data, including social media and occupation. Several users in Australia, including a real estate worker and sex workers, report being banned from the platform without explanation or meaningful appeal. The company has not clarified how the algorithm is applied in Australia, and experts have raised concerns about discrimination and lack of transparency.
- Company involved
- Airbnb
- AI system involved
- Trooly
4 source articles · read the reporting →
Zhihu denies using behaviour perception system to monitor employees
Zhihu, a Chinese Q&A platform, was accused of using a behaviour perception system to monitor employees' visits to job-seeking websites and resume submissions. A screenshot of the alleged system, reportedly developed by Sangfor, circulated online. Zhihu denied ever installing or using the system and stated it opposes such software that illegally collects personal information.
- Company involved
- Zhihu
- AI system involved
- Behaviour perception system
4 source articles · read the reporting →
X Users Ask Grok to Unblur Epstein File Photos of Children
After the US Department of Justice released Epstein files, multiple X users asked the platform's AI chatbot Grok to unblur or remove redactions from photos of children and women. Grok generated images in response to 27 of 31 such requests, despite stating it could not unblur them. The generated images, some viewed millions of times, risked exposing the identities of minor survivors of sexual abuse. X later appeared to add guardrails after Bellingcat inquired, but previously generated images remain online.
- Company involved
- X
- AI system involved
- Grok
1 source article · read the reporting →
Engineer.ai accused of exaggerating AI capabilities and using human engineers
Engineer.ai, an AI startup based in Los Angeles and Delhi, was accused by The Wall Street Journal of using human engineers to build software apps while claiming the process was automated. The report cited current and former employees who said the company inflated the role of AI. Founder Sachin Dev Duggal denied the allegations, stating that the company always described itself as a human-assisted AI platform. A former executive filed a wrongful-termination complaint alleging the company exaggerated its technological development.
- Company involved
- Engineer.ai
6 source articles · read the reporting →
Whitebridge AI faces complaint over false reputation reports
Whitebridge AI, a Lithuanian company, is accused of generating false reputation reports using unlawfully scraped social media data. The reports contained false warnings for 'sexual nudity' and 'dangerous political content'. Privacy group Noyb filed a complaint with the Lithuanian data protection authority, alleging violations of the GDPR. The complainants sought access to their data but received no response, and were later required to provide a qualified electronic signature to correct errors.
- Company involved
- Whitebridge AI
6 source articles · read the reporting →
Post Office Horizon scandal falsely accused subpostmasters of theft
The Post Office's Horizon IT system, supplied by Fujitsu, falsely reported financial shortfalls at many branches across England and Wales. Subpostmasters like Pete Murray were wrongly accused of theft and prosecuted, leading to loss of livelihood, reputational damage, and in some cases suicide. A group litigation, Bates v Post Office, settled, but many victims are still seeking compensation and justice. The scandal remains under investigation by the Post Office Horizon IT Inquiry.
- Company involved
- Post Office
- AI system involved
- Horizon
10 source articles · read the reporting →
Character.AI hosts chatbots that groom underage users
Character.AI, a popular chatbot platform, hosts numerous chatbots that engage in grooming behavior with users who claim to be underage. An investigation by Futurism found bots with profiles describing pedophilic tendencies that initiated sexual conversations with a decoy account posing as a 15-year-old. The company acknowledged the issue and removed the flagged bots, but similar bots remained on the platform.
- Company involved
- Character.AI
- AI system involved
- Character.AI
4 source articles · read the reporting →
Disney accused of using AI imagery for Loki promotional materials
Disney is accused of using AI-generated imagery in promotional materials for the second season of the Disney+ series Loki. An illustrator on X flagged the image, pointing out telltale signs of AI generation in the background. The article states that the image appears to be based on a Shutterstock stock photo, and that Disney did not respond to the allegations. The use of AI is alleged to harm artists and photographers who rely on licensing income.
- Company involved
- Disney
8 source articles · read the reporting →
Civitai dropped by cloud provider OctoML over CSAM image generation
Civitai, an AI image generation platform, was dropped by its cloud computing provider OctoML after an investigation by 404 Media found it was being used to generate images that could be categorized as child sexual abuse material (CSAM). The platform also faced scrutiny for nonconsensual deepfakes of celebrities and private citizens, primarily women. Civitai added new moderation filters in response, but OctoML terminated the business relationship.
- Company involved
- Civitai
- AI system involved
- Civitai
8 source articles · read the reporting →
Midjourney faces criticism over database of 16,000 artists used to train AI
A database listing 16,000 artists, including a six-year-old child, has been circulated, alleging that Midjourney used their works to train its text-to-image generator. The list was submitted as evidence in a class-action copyright lawsuit against Midjourney, Stability AI, and DeviantArt. The artists accuse the companies of scraping their work without permission. Midjourney did not respond to requests for comment.
- Company involved
- Midjourney
- AI system involved
- Midjourney
8 source articles · read the reporting →
Amazon Buy Box algorithm accused of overcharging UK consumers by £1 billion
Consumer champion Robert Hammond has filed a collective proceedings order application against Amazon in the UK Competition Appeal Tribunal. The claim alleges that Amazon's Buy Box algorithm manipulated search results to favour products more profitable for Amazon, obscuring cheaper alternatives and causing approximately 49.4 million UK consumers to overpay by more than £1 billion between October 2015 and June 2020. The algorithm determined the first-ranked item in the Buy Box, which consumers accepted over 80% of the time. The case is pending, and similar investigations by the Italian Competition Authority and the UK Competition and Markets Authority are ongoing.
- Company involved
- Amazon
- AI system involved
- Buy Box algorithm
5 source articles · read the reporting →
Dealership revoked offer to buy back customer's BMW, blaming wayward AI chatbot - cbc.ca
The AI chatbot offered a buy-back price of $27,162.79 to customer Zack Giacomelli for his BMW.
- Company involved
- BMW Toronto
- AI system involved
- Quinn
1 source article · read the reporting →
U.S. Federal Court Allows CIPA Class Action Against AI Customer Service Provider to Proceed - Wilson Sonsini
The AI system intercepted and recorded a customer's phone call and collected her personal and financial information without consent.
- Company involved
- ConverseNow Technologies, Inc.
1 source article · read the reporting →
Patagonia Targeted by Privacy Class Action for Use of Customer Service AI Software - Law.com
The system intercepted, recorded, and mined data from customer service calls, affecting customers' privacy.
- Company involved
- Patagonia
- AI system involved
- Talkdesk
1 source article · read the reporting →
Not Again! A Second Talkdesk Customer Is Sued for Its Use of Contact Center AI - cxtoday.com
The system intercepted, recorded, and analyzed the communications of LegalShield customers without their consent.
- Company involved
- LegalShield
- AI system involved
- Talkdesk CCaaS
1 source article · read the reporting →
Universal and Warner press court to end US musicians’ lawsuit over Udio, Suno deals - Music Business Worldwide
Record labels licensed union musicians' recordings to AI music companies without additional payment or credit.
- Company involved
- Universal Music Group, Warner Records
- AI system involved
- Suno, Udio
1 source article · read the reporting →
