Data-Leakage

Grok Bot AI Agent Leaks Personal Bank Data to Company Slack

ATLAS OWASP HIGH ▲ 7.2 HN AI Security Oct 12, 2026

A CEO's personal AI financial agent, built on Grok Bot, mistakenly routed a sensitive monthly audit report — containing bank balances, savings data, and personal expenses — to a company-wide Slack channel instead of a private group chat. The incident highlights the real-world consequences of excessive agency and misconfigured output handling in autonomous AI agents. It underscores the risks of granting agentic AI systems access to sensitive financial data without robust access controls and destination-verification logic.

OpenAI Adds Training Monitors After Medicare Data Breach

ATLAS OWASP HIGH ▲ 6.5 Simon Willison Oct 07, 2026

OpenAI has implemented real-time monitoring and staff intervention capabilities following a breach involving Medicare data, according to the company's chief strategy officer testifying before the Australian parliament. The controls are designed to detect and halt training runs if models access the internet in unauthorised ways. This represents a reactive governance measure responding to a confirmed AI-related data incident.

AIUC Launches AIUC-1 Agent Certification Standard for Enterprises

FIRST LOOK ATLAS OWASP LOW ▲ 7.8 TechCrunch AI Sep 16, 2026

AIUC has launched a third-party audit and certification framework called AIUC-1, backed by a 5,000-test suite covering jailbreaks, hallucinations, and data leakage, designed to give enterprise buyers verifiable safety assurances before deploying AI agents. This closes a significant accountability gap: until now, organisations deploying agents had no standardised, independently verified benchmark to evaluate behavioural safety commitments — mirroring the role SOC 2 plays in conventional cloud security procurement. Residual gaps remain around the standard's coverage of novel agent architectures, the cadence of re-certification as models update, and whether AIUC-1 will achieve the broad vendor adoption needed to become a genuine market expectation.

Check Point 2026 AI Security Report: LLMs Now Run Live Attacks

ATLAS OWASP CRITICAL ▲ 9.2 Check Point Research Jul 14, 2026

Check Point Research's 2026 AI Security Report documents a fundamental shift in the threat landscape: AI has moved from a development accelerator to an active operator within live intrusions, with nation-state and criminal actors alike deploying LLMs to conduct hands-on attack operations. The report highlights the maturation of AI-enabled criminal tooling markets, the rise of indirect prompt injection as an operationally relevant attack vector, and persistent enterprise data leakage through unsanctioned AI application use. Agentic architectures are being specifically exploited through planted configuration files that persist malicious instructions across sessions, representing a durable and largely invisible bypass technique.

Stash AI Memory Poisoning Exposes Agent Data Leakage

ATLAS OWASP MEDIUM ▲ 6.5 HN AI Security Apr 26, 2026

Stash is an open-source persistent memory layer for AI agents using PostgreSQL and pgvector, exposing a broad MCP tool surface (28 tools) that introduces significant attack vectors including memory poisoning, sensitive data leakage, and cross-namespace contamination. While marketed as a productivity enhancement, the architecture centralises long-term agent memory in a shared backend, creating a high-value target for adversarial manipulation. Security teams deploying autonomous agents should treat persistent memory stores as critical infrastructure requiring strict access controls and integrity validation.

Prompt Injection Flaws in Salesforce and Microsoft AI

ATLAS OWASP HIGH ▲ 8.2 Dark Reading Apr 16, 2026

Prompt injection vulnerabilities in Salesforce Agentforce and Microsoft Copilot were patched after researchers demonstrated that external attackers could exploit them to exfiltrate sensitive user data. The flaws highlight systemic risks in enterprise AI agent deployments, where insufficient input sanitisation allows malicious content to hijack agent behaviour. Both vendors have issued patches, but the incidents underscore the growing attack surface introduced by agentic AI systems operating with elevated privileges.