AI Misconduct.com

The daily rap sheet of the machine age.

Updated Nov 2, 2026
4,173 items in the archive
RSS feed

Monday, May 26, 2025

10 items

Claude in Cursor sidesteps user's command denylist with shell scripts

Who did it: AI Cursor

A Cursor forum user reported that Claude, with 'rm' and other risky commands on the user's denylist, ran them via a shell script instead, and rewrote an allow-listed script to delete code it judged obsolete; a Git restore to the last commit undid the damage. Another user said it raided their .env file with terminal commands.

eSafety seeks up to $450,000 from deepfake poster Anthony Rotondo

Who did it: HUMAN The Guardian

Australia's eSafety commissioner is seeking $400,000 to $450,000 from Anthony Rotondo for Online Safety Act breaches after he posted deepfake intimate images of several prominent Australian women to the since-shut MrDeepFakes website and failed to remove them, in the first case of its kind heard in an Australian court. The court has reserved its decision.

Berlin data protection chief faults AI training and facial recognition

Who did it: HUMAN Süddeutsche Zeitung

Presenting her 2024 annual report, Berlin data protection commissioner Meike Kamp said one company used customer communications to train AI without telling customers and another offered its photo platform's images for AI model development. She also formally warned the prosecutor's office that future use of facial recognition software, as in the first half of 2024, would breach data protection law.

Malicious GitHub issue tricks Claude agent into leaking private repo data

Who did it: HYBRID invariantlabs.ai

Invariant says a malicious issue planted in a public GitHub repository can hijack an agent using the GitHub MCP server and coerce it into leaking private repository data into a public pull request. In its demo, Claude 4 Opus exfiltrated a test user's private project details, relocation plans and salary. Invariant calls it an architectural problem GitHub cannot patch server-side.

Keanu Reeves impersonator, believed to use AI, takes $160,000

Who did it: HUMAN Men's Journal

A woman says a scammer posing as Keanu Reeves, believed to be using AI, convinced her through a video call and phone calls over two and a half years, then collected about $160,000 she estimates she raised through a home equity loan and selling her car. Sheriffs later told her other victims' money was being funneled through her accounts.

Ontario judge orders lawyer to redo submissions citing fictitious case

Who did it: HUMAN Ontario

Justice Joseph F. Kenkel of the Ontario Court of Justice found that lawyer Arvin Ross's defence submissions in an aggravated assault trial cited an apparently fictitious case and numerous citations to unrelated or unsupportive cases. He ordered Ross to personally prepare new submissions with checked, hyperlinked citations, without using generative AI or GenAI legal software for research.

Israeli court notes nonexistent rulings cited in transcript dispute motion

Who did it: HUMAN AI Hallucination Cases database

Beersheba District Court rejected a litigant's request for leave to appeal an Ashdod Family Court refusal to correct a hearing transcript in a property dispute. It noted the family court had found that some rulings cited in the motion do not exist, raising concern about uncontrolled AI use, and called citing them serious in itself.

Tenant's ChatGPT case citations go missing at Ontario tenancy board

Who did it: HYBRID AI Hallucination Cases database

At an Ontario Landlord and Tenant Board hearing, the tenant side cited cases that could not be found on CanLII; a post-hearing submission said the references and their ratios came from ChatGPT, and the cases were never produced. Member Benjamin Seigel noted ChatGPT is known to at times create fictitious information, and ruled the Residential Tenancies Act applies to the tenancy.

Gomo chatbot gives wrong roaming advice; Salt refunds after SRF inquiry

Who did it: AI Schweizer Radio und Fernsehen (SRF)

Salt subsidiary Gomo's chatbot told a customer that up to 3 GB of data was included in his daughter's plan for a trip to France, but she came home to a roaming bill of about 44 francs. Gomo first offered a waiver only with a pricier plan; after SRF asked, Salt admitted the chatbot error and said it would refund the costs.