Skip to main content
a promotional graphic telling you that PCI Compliance is no longer an annual exercise and that continuous monitory must be built in

AI Incident Register

  1. Meta's Muse AI agent allegedly read an Inc. columnist's private Messages without permission; Meta denied it

    Meta's Muse AI agent for Mac allegedly read an Inc. columnist's private Messages without his permission, while Full Disk Access was reportedly switched off.

    ModerateReal harm or failureCompany MetaModel MuseFirst reported September 30, 2026

    Could it affect you? Yes if you use Meta's Muse app on Mac

  2. Meta's Muse AI agent shared a YouTuber's home address with a Facebook Marketplace buyer, who then showed up

    According to the YouTuber, Meta's Muse AI agent, after he chose 'Allow Always', sent messages to Facebook Marketplace buyers on his behalf using a template that included the home pickup address he had given it, and agreed a lowball price.

    ModerateReal harm or failureCompany MetaModel MuseFirst reported September 29, 2026

    Could it affect you? Yes if you let AI agents like Meta's Muse message people on your behalf

  3. Z.ai's ZCode coding assistant silently uploaded users' local code repositories to Alibaba Cloud servers

    ZCode, a coding assistant made by Z.ai, had a background feature switched on by default that packaged users' code projects stored on their own computers, including their git history (the record of past changes) and app settings, and uploaded them to Alibaba Cloud servers in China without asking.

    SeriousReal harm or failureCompany Z.aiModel ZCodeFirst reported September 22, 2026

    Could it affect you? Yes if your developers used the ZCode coding assistant

  4. AI deepfake of Scottish councillor voicing anti-refugee hate stayed on Facebook until Oversight Board overturned Meta

    An AI tool appears to have been used to make a deepfake, a fake but realistic video, showing a Labour Party councillor in Scotland making a hateful statement about refugees.

    ModerateReal harm or failureFirst reported September 17, 2026

    Could it affect you? Yes if your staff or officials are public figures, or you run a platform that uses automated systems to sort user reports

  5. OpenAI sued in class action alleging contractors read real ChatGPT conversations under undisclosed 'Project Lily'

    ChatGPT, OpenAI's chatbot, is not accused of doing anything on its own.

    Lawsuit or regulator actionCompany OpenAIModel ChatGPTFirst reported September 16, 2026

    Could it affect you? Yes if your staff use consumer ChatGPT accounts for work

Promotional banner for the Pentest Readiness checklist download