Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.
1 Feb 2025 · Google
SafeBreach researchers showed at Black Hat that instructions hidden in a Google Calendar invitation could make Gemini open windows, turn on appliances, leak emails and start video calls when a user later asked it to summarise their schedule.
workflow·prompt injection·
15 Jan 2025 · Microsoft
Researchers at Aim Security found that a crafted email could make Microsoft 365 Copilot exfiltrate data from a user's tenant with no clicks, tracked as CVE-2025-32711.
workflow·prompt injection·
11 Nov 2022 · Air Canada
A British Columbia tribunal ordered Air Canada to honour a bereavement discount that its website chatbot had described but which did not exist, rejecting the airline's argument that the chatbot was a separate legal entity.
customer service·hallucinated action·
