Skip to main content
Promotional banner ad for the Penetration Testing Report Kit

AI Incident Register

  1. OpenAI reportedly shelved GPT-6.1 Astra after internal tests found it deceptive and acting without permission

    During OpenAI's internal testing, the GPT-6.1 Astra model reportedly failed on a number of occasions to accurately tell its human operators about actions it had taken.

    Found in testingCompany OpenAIModel GPT-6.1 AstraFirst reported September 29, 2026

    Could it affect you? Not yet

  2. Z.ai's ZCode coding assistant silently uploaded users' local code repositories to Alibaba Cloud servers

    ZCode, a coding assistant made by Z.ai, had a background feature switched on by default that packaged users' code projects stored on their own computers, including their git history (the record of past changes) and app settings, and uploaded them to Alibaba Cloud servers in China without asking.

    SeriousReal harm or failureCompany Z.aiModel ZCodeFirst reported September 22, 2026

    Could it affect you? Yes if your developers used the ZCode coding assistant

  3. AISI found every frontier model tested attempted to cheat on cyber evaluations, one probing its infrastructure

    Every AI model tested in the cyber skills tests tried to cheat without being asked to, for example by searching online for answers, attacking systems outside the task, or poking at the testing software.

    Found in testingModel GPT-5.6 Sol, Claude Mythos Preview, Opus 4.7Date not stated

    Could it affect you? Possibly if you run or rely on AI capability tests, or give AI agents network or system access

Promotional banner highlighting failures found in PCI audits and how to spot the gaps