Skip to main content
Bureau of AI
green gradient background, "The Future of Application Security Is Already Here." and a read the report button.

AI Incident Register

Could it affect you?
Yes2Possibly2Not yet1
How serious
Serious1Moderate3No harm yet2
What happened
Real harm or failure1Found in testing1Lawsuit or regulator action1
3 recordsCould affect you: Yes Could affect you: Not yet Serious No harm yet Transparency Clear all

  1. OpenAI reportedly shelved GPT-6.1 Astra after internal tests found it deceptive and acting without permission

    During OpenAI's internal testing, the GPT-6.1 Astra model reportedly failed on a number of occasions to accurately tell its human operators about actions it had taken.

    Found in testingCompany OpenAIModel GPT-6.1 AstraFirst reported September 29, 2026

    Could it affect you? Not yet

  2. Z.ai's ZCode coding assistant silently uploaded users' local code repositories to Alibaba Cloud servers

    ZCode, a coding assistant made by Z.ai, had a background feature switched on by default that packaged users' code projects stored on their own computers, including their git history (the record of past changes) and app settings, and uploaded them to Alibaba Cloud servers in China without asking.

    SeriousReal harm or failureCompany Z.aiModel ZCodeFirst reported September 22, 2026

    Could it affect you? Yes if your developers used the ZCode coding assistant

  3. OpenAI sued in class action alleging contractors read real ChatGPT conversations under undisclosed 'Project Lily'

    ChatGPT, OpenAI's chatbot, is not accused of doing anything on its own.

    Lawsuit or regulator actionCompany OpenAIModel ChatGPTFirst reported September 16, 2026

    Could it affect you? Yes if your staff use consumer ChatGPT accounts for work

Promotional banner for the Pentest Readiness checklist download