<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url><loc>https://badbots.news/</loc><lastmod>2026-11-03T22:01:52Z</lastmod></url>
<url><loc>https://badbots.news/misbehavior</loc><lastmod>2026-11-03T22:01:52Z</lastmod></url>
<url><loc>https://badbots.news/misuse</loc><lastmod>2026-11-03T21:03:10Z</lastmod></url>
<url><loc>https://badbots.news/harmful-deployment</loc><lastmod>2026-11-03T01:02:12Z</lastmod></url>
<url><loc>https://badbots.news/incidents/189-chatbots-read-the-right-sources-then-blow-the-election-facts</loc><lastmod>2026-11-03T22:01:52Z</lastmod></url>
<url><loc>https://badbots.news/incidents/188-binance-hackers-used-a-fake-job-interview-malware-and-an</loc><lastmod>2026-11-03T21:03:10Z</lastmod></url>
<url><loc>https://badbots.news/incidents/187-an-ai-agent-knocked-on-2-250-corporate-cloud-tenants-faster</loc><lastmod>2026-11-03T21:03:01Z</lastmod></url>
<url><loc>https://badbots.news/incidents/104-chatgpt-has-appointed-404-media-its-unofficial-tech-support</loc><lastmod>2026-11-03T21:02:50Z</lastmod></url>
<url><loc>https://badbots.news/incidents/101-claude-slipped-past-a-paywall-to-peek-at-georgia-voter-data</loc><lastmod>2026-11-03T21:02:45Z</lastmod></url>
<url><loc>https://badbots.news/incidents/186-thieves-rent-out-stolen-ai-keys-victims-get-the-bill</loc><lastmod>2026-11-03T19:02:04Z</lastmod></url>
<url><loc>https://badbots.news/incidents/185-ransomware-crew-may-have-let-an-ai-loop-run-its-uk-school</loc><lastmod>2026-11-03T18:02:16Z</lastmod></url>
<url><loc>https://badbots.news/incidents/89-robot-asked-to-slice-an-apple-considers-your-fingers-instead</loc><lastmod>2026-11-03T17:01:49Z</lastmod></url>
<url><loc>https://badbots.news/incidents/130-facial-recognition-keeps-catching-shoplifters-who-are-just</loc><lastmod>2026-11-03T01:02:12Z</lastmod></url>
<url><loc>https://badbots.news/incidents/136-chinese-state-hackers-used-the-artex-ai-framework-to-run</loc><lastmod>2026-11-02T22:02:27Z</lastmod></url>
<url><loc>https://badbots.news/incidents/182-chatgpt-adds-a-senate-seat-nobody-asked-for-and-tells-voters</loc><lastmod>2026-11-02T18:02:26Z</lastmod></url>
<url><loc>https://badbots.news/incidents/181-clearview-ai-ignores-france-s-orders-receives-20m-reminder</loc><lastmod>2026-11-02T18:02:22Z</lastmod></url>
<url><loc>https://badbots.news/incidents/180-a-silent-google-doc-share-turned-cursor-into-a-remote-code</loc><lastmod>2026-11-02T17:06:07Z</lastmod></url>
<url><loc>https://badbots.news/incidents/179-claude-breached-three-real-organizations-while-running-a</loc><lastmod>2026-11-02T17:06:02Z</lastmod></url>
<url><loc>https://badbots.news/incidents/178-phi-4-gets-a-secret-side-hustle-rerouting-its-own-tool-calls</loc><lastmod>2026-11-02T17:05:58Z</lastmod></url>
<url><loc>https://badbots.news/incidents/177-guardrail-bouncer-fooled-by-a-nonsense-token-coffee-waves</loc><lastmod>2026-11-02T17:05:56Z</lastmod></url>
<url><loc>https://badbots.news/incidents/176-copypasta-a-readme-comment-that-talks-coding-agents-into</loc><lastmod>2026-11-02T17:05:53Z</lastmod></url>
<url><loc>https://badbots.news/incidents/175-just-add-a-fake-function-tricking-ai-chatbots-into-spilling</loc><lastmod>2026-11-02T17:05:50Z</lastmod></url>
<url><loc>https://badbots.news/incidents/174-just-add-two-numbers-and-claude-spills-its-system-prompt-to</loc><lastmod>2026-11-02T17:05:47Z</lastmod></url>
<url><loc>https://badbots.news/incidents/173-clearview-ai-gets-sued-again-proving-scraping-faces-is-not-a</loc><lastmod>2026-11-02T17:05:39Z</lastmod></url>
<url><loc>https://badbots.news/incidents/76-the-robot-broke-in-then-did-the-paperwork-hugging-face-hit</loc><lastmod>2026-11-02T17:05:18Z</lastmod></url>
<url><loc>https://badbots.news/incidents/157-one-prompt-to-rule-them-all-policy-puppetry-walks-past</loc><lastmod>2026-11-02T17:04:40Z</lastmod></url>
<url><loc>https://badbots.news/incidents/172-a-sheet-of-a4-paper-makes-gpt-4v-forget-you-exist</loc><lastmod>2026-11-02T16:11:00Z</lastmod></url>
<url><loc>https://badbots.news/incidents/171-ai-agents-gave-themselves-a-raise-on-their-spending-limit</loc><lastmod>2026-11-02T16:10:58Z</lastmod></url>
<url><loc>https://badbots.news/incidents/170-spies-outsourced-their-scripting-to-ai-and-the-scripts-left</loc><lastmod>2026-11-02T16:10:55Z</lastmod></url>
<url><loc>https://badbots.news/incidents/169-anthropic-s-skill-scanner-passed-a-backdoored-skill-and</loc><lastmod>2026-11-02T16:10:52Z</lastmod></url>
<url><loc>https://badbots.news/incidents/168-copilot-cowork-s-sandbox-bypass-hands-attackers-the-keys-to</loc><lastmod>2026-11-02T16:10:50Z</lastmod></url>
<url><loc>https://badbots.news/incidents/167-zoom-s-ai-agent-gets-hijacked-then-politely-files-a-normal</loc><lastmod>2026-11-02T16:10:47Z</lastmod></url>
<url><loc>https://badbots.news/incidents/166-admins-said-no-to-deepseek-copilot-cowork-s-skills-said-hold</loc><lastmod>2026-11-02T16:10:42Z</lastmod></url>
<url><loc>https://badbots.news/incidents/165-codex-for-everything-reads-your-email-obeys-the-email-then</loc><lastmod>2026-11-02T16:10:40Z</lastmod></url>
<url><loc>https://badbots.news/incidents/164-copilot-cli-let-a-sneaky-readme-install-malware-without</loc><lastmod>2026-11-02T16:10:37Z</lastmod></url>
<url><loc>https://badbots.news/incidents/163-agent-builder-agent-gets-form-bombed-into-mailing-your-crm</loc><lastmod>2026-11-02T16:10:35Z</lastmod></url>
<url><loc>https://badbots.news/incidents/162-huggingchat-gets-tricked-into-smuggling-your-spreadsheets</loc><lastmod>2026-11-02T16:10:33Z</lastmod></url>
<url><loc>https://badbots.news/incidents/161-vincent-ai-gets-tricked-into-serving-up-a-fake-login-screen</loc><lastmod>2026-11-02T16:10:31Z</lastmod></url>
<url><loc>https://badbots.news/incidents/160-cellshock-claude-excel-spills-the-beans-revenue-projections</loc><lastmod>2026-11-02T16:10:28Z</lastmod></url>
<url><loc>https://badbots.news/incidents/159-attacker-used-claude-code-to-run-extortion-campaign-against</loc><lastmod>2026-11-02T16:10:25Z</lastmod></url>
<url><loc>https://badbots.news/incidents/158-cursor-s-ai-took-a-readme-a-little-too-seriously-and-started</loc><lastmod>2026-11-02T16:10:23Z</lastmod></url>
<url><loc>https://badbots.news/incidents/156-claude-computer-use-reads-a-cursed-pdf-then-tries-to-rm-rf</loc><lastmod>2026-11-02T16:10:19Z</lastmod></url>
<url><loc>https://badbots.news/incidents/155-sophos-builds-ai-propaganda-machine-asks-nicely-if-anyone</loc><lastmod>2026-11-02T16:10:17Z</lastmod></url>
<url><loc>https://badbots.news/incidents/154-gemini-for-workspace-obeys-whatever-email-it-reads-and</loc><lastmod>2026-11-02T16:10:15Z</lastmod></url>
<url><loc>https://badbots.news/incidents/152-gemini-walks-into-a-google-doc-and-starts-taking-orders-from</loc><lastmod>2026-11-02T16:10:13Z</lastmod></url>
<url><loc>https://badbots.news/incidents/151-scam-stores-now-build-themselves-complete-with-fake-owners</loc><lastmod>2026-11-02T16:10:10Z</lastmod></url>
<url><loc>https://badbots.news/incidents/150-crypto-romance-scammers-used-a-chatbot-to-write-messages-to</loc><lastmod>2026-11-02T16:10:08Z</lastmod></url>
<url><loc>https://badbots.news/incidents/149-your-friendly-neighborhood-ai-model-now-comes-with-a-free</loc><lastmod>2026-11-02T16:10:05Z</lastmod></url>
<url><loc>https://badbots.news/incidents/148-scammers-cloned-a-boss-s-voice-collected-243k-and-got</loc><lastmod>2026-11-02T16:10:01Z</lastmod></url>
<url><loc>https://badbots.news/incidents/126-infostealer-hires-an-ai-intern-to-dig-up-dirt-on-its-victims</loc><lastmod>2026-11-02T15:03:55Z</lastmod></url>
<url><loc>https://badbots.news/incidents/146-copilot-cowork-trusted-a-sketchy-skill-s-word-for-it-and</loc><lastmod>2026-11-02T15:03:51Z</lastmod></url>
<url><loc>https://badbots.news/incidents/145-codex-s-auto-review-agent-waved-malware-through-like-a</loc><lastmod>2026-11-02T15:03:44Z</lastmod></url>
<url><loc>https://badbots.news/incidents/144-chatgpt-for-sheets-fell-for-a-hidden-note-and-started</loc><lastmod>2026-11-02T15:03:39Z</lastmod></url>
<url><loc>https://badbots.news/incidents/143-ramp-s-sheets-ai-gets-tricked-into-mailing-your-financials</loc><lastmod>2026-11-02T15:03:34Z</lastmod></url>
<url><loc>https://badbots.news/incidents/142-your-ai-agent-will-hand-your-api-key-to-a-stranger-s-server</loc><lastmod>2026-11-02T15:03:29Z</lastmod></url>
<url><loc>https://badbots.news/incidents/141-ibm-s-bob-coding-agent-got-prompt-injected-into-running</loc><lastmod>2026-11-02T15:03:23Z</lastmod></url>
<url><loc>https://badbots.news/incidents/140-claude-code-gets-plugin-pwned-malicious-marketplace-tricks</loc><lastmod>2026-11-02T15:03:19Z</lastmod></url>
<url><loc>https://badbots.news/incidents/139-slack-ai-gets-tricked-into-leaking-your-api-key-through-a</loc><lastmod>2026-11-02T15:03:14Z</lastmod></url>
<url><loc>https://badbots.news/incidents/138-writer-com-s-ai-read-a-hidden-note-and-mailed-your-salary</loc><lastmod>2026-11-02T15:03:08Z</lastmod></url>
<url><loc>https://badbots.news/incidents/137-embrace-the-ai-coding-tools-gave-their-browsers-the-keys-to</loc><lastmod>2026-11-02T06:02:25Z</lastmod></url>
<url><loc>https://badbots.news/incidents/125-five-charged-as-doj-cracks-down-on-ai-assisted-ghost-student</loc><lastmod>2026-11-02T05:02:55Z</lastmod></url>
<url><loc>https://badbots.news/incidents/135-ai-assisted-hackers-rooted-25-firewalls-including-three-at-a</loc><lastmod>2026-11-02T05:02:42Z</lastmod></url>
<url><loc>https://badbots.news/incidents/134-told-to-break-out-of-a-vm-for-a-ctf-gpt-5-6-cyber-escaped</loc><lastmod>2026-11-02T05:02:37Z</lastmod></url>
<url><loc>https://badbots.news/incidents/81-model-slips-itself-a-sci-fi-persona-in-the-middle-of-its-own</loc><lastmod>2026-11-01T18:04:16Z</lastmod></url>
<url><loc>https://badbots.news/incidents/79-agents-went-looking-for-trouble-on-the-live-internet-and</loc><lastmod>2026-11-01T18:04:10Z</lastmod></url>
<url><loc>https://badbots.news/incidents/77-copilot-for-word-catches-the-worm-hidden-instructions-now</loc><lastmod>2026-11-01T18:04:06Z</lastmod></url>
<url><loc>https://badbots.news/incidents/75-claude-spilled-the-tea-on-its-own-user-one-nested-link-at-a</loc><lastmod>2026-11-01T18:04:01Z</lastmod></url>
<url><loc>https://badbots.news/incidents/71-hackers-asked-meta-s-ai-support-bot-nicely-it-handed-over</loc><lastmod>2026-11-01T18:03:57Z</lastmod></url>
<url><loc>https://badbots.news/incidents/133-copilot-cowork-hands-your-files-to-strangers-then-writes-a</loc><lastmod>2026-11-01T18:03:54Z</lastmod></url>
<url><loc>https://badbots.news/incidents/67-snowflake-s-cortex-agent-reads-a-readme-obeys-a-stranger</loc><lastmod>2026-11-01T18:03:51Z</lastmod></url>
<url><loc>https://badbots.news/incidents/65-cline-s-issue-bot-took-the-hint-then-took-the-publishing</loc><lastmod>2026-11-01T18:03:46Z</lastmod></url>
<url><loc>https://badbots.news/incidents/63-claude-cowork-gets-talked-into-mailing-your-files-to-a</loc><lastmod>2026-11-01T18:03:41Z</lastmod></url>
<url><loc>https://badbots.news/incidents/62-prompt-injection-in-one-email-turns-an-ai-mail-assistant</loc><lastmod>2026-11-01T18:03:36Z</lastmod></url>
<url><loc>https://badbots.news/incidents/61-antigravity-hands-your-env-to-whoever-asks-nicely-in-1px</loc><lastmod>2026-11-01T18:03:33Z</lastmod></url>
<url><loc>https://badbots.news/incidents/132-ransomware-crew-told-the-chatbot-it-was-just-a-red-team-the</loc><lastmod>2026-11-01T16:01:34Z</lastmod></url>
<url><loc>https://badbots.news/incidents/131-ai-scraping-and-imitating-indigenous-australian-art-artists</loc><lastmod>2026-11-01T15:01:32Z</lastmod></url>
<url><loc>https://badbots.news/incidents/129-lawyers-hid-a-secret-message-to-brainwash-the-court-s-robot</loc><lastmod>2026-11-01T03:01:48Z</lastmod></url>
<url><loc>https://badbots.news/incidents/128-blockchain-detectives-get-detected-chainalysis-breached-by</loc><lastmod>2026-11-01T03:01:45Z</lastmod></url>
<url><loc>https://badbots.news/incidents/124-ai-tools-erased-scars-and-visible-differences-when-asked-to</loc><lastmod>2026-10-30T17:07:29Z</lastmod></url>
<url><loc>https://badbots.news/incidents/91-one-hacker-a-swarm-of-ai-agents-and-1-200-e-commerce-sites</loc><lastmod>2026-10-30T17:06:53Z</lastmod></url>
<url><loc>https://badbots.news/incidents/123-open-weight-model-reads-the-patch-notes-nobody-was-supposed</loc><lastmod>2026-10-30T17:06:47Z</lastmod></url>
<url><loc>https://badbots.news/incidents/122-hugging-face-malware-crew-returns-from-the-dead-to-mine</loc><lastmod>2026-10-30T17:06:43Z</lastmod></url>
<url><loc>https://badbots.news/incidents/121-contractor-s-personal-claude-agent-wandered-into-the</loc><lastmod>2026-10-30T17:06:39Z</lastmod></url>
<url><loc>https://badbots.news/incidents/120-claude-mem-uploads-your-last-30-days-of-prompts-to-a-server</loc><lastmod>2026-10-30T17:06:31Z</lastmod></url>
<url><loc>https://badbots.news/incidents/119-hack-the-hardware-and-the-chatbot-starts-giving-very-bad</loc><lastmod>2026-10-30T17:06:28Z</lastmod></url>
<url><loc>https://badbots.news/incidents/118-richest-man-on-earth-pitches-crypto-on-a-spacex-stream</loc><lastmod>2026-10-30T17:06:25Z</lastmod></url>
<url><loc>https://badbots.news/incidents/117-godaddy-says-an-ai-driven-attacker-pulled-customer-contact</loc><lastmod>2026-10-30T17:06:16Z</lastmod></url>
<url><loc>https://badbots.news/incidents/116-cathedral-says-its-ai-agents-broke-into-anthropic-in-under</loc><lastmod>2026-10-30T17:06:11Z</lastmod></url>
<url><loc>https://badbots.news/incidents/115-google-s-ai-mode-gets-cagey-about-2020-election-winners-then</loc><lastmod>2026-10-30T17:06:05Z</lastmod></url>
<url><loc>https://badbots.news/incidents/114-asylum-interview-summaries-from-home-office-ai-fail-one-in</loc><lastmod>2026-10-30T17:06:01Z</lastmod></url>
<url><loc>https://badbots.news/incidents/113-agents-turned-rubygems-into-a-getaway-van-2-000-gems-one</loc><lastmod>2026-10-30T17:05:58Z</lastmod></url>
<url><loc>https://badbots.news/incidents/112-bots-stuffed-the-vape-ballot-box-and-still-lost-the-vote</loc><lastmod>2026-10-30T17:05:51Z</lastmod></url>
<url><loc>https://badbots.news/incidents/111-medicare-s-ai-prior-authorization-rollout-was-rushed-and</loc><lastmod>2026-10-30T17:05:48Z</lastmod></url>
<url><loc>https://badbots.news/incidents/109-mythos-5-was-told-its-victim-was-real-and-kept-hacking</loc><lastmod>2026-10-30T17:05:38Z</lastmod></url>
<url><loc>https://badbots.news/incidents/108-police-reopen-grok-deepfake-abuse-case-after-survivor-s</loc><lastmod>2026-10-30T17:05:33Z</lastmod></url>
<url><loc>https://badbots.news/incidents/107-chatgpt-s-cache-served-up-strangers-chat-titles-nobody</loc><lastmod>2026-10-30T17:05:28Z</lastmod></url>
<url><loc>https://badbots.news/incidents/106-glm-5-3-on-workers-ai-handed-some-customers-other-customers</loc><lastmod>2026-10-30T17:05:23Z</lastmod></url>
<url><loc>https://badbots.news/incidents/105-open-weight-model-tried-to-phone-home-to-beijing-mid-task</loc><lastmod>2026-10-30T17:05:14Z</lastmod></url>
<url><loc>https://badbots.news/incidents/103-your-downloads-folder-is-now-a-hacker-s-suggestion-box</loc><lastmod>2026-10-30T17:05:06Z</lastmod></url>
<url><loc>https://badbots.news/incidents/102-models-keep-receipts-on-their-own-deletions-password</loc><lastmod>2026-10-30T17:05:03Z</lastmod></url>
<url><loc>https://badbots.news/incidents/100-openai-s-sealed-off-agents-held-a-secret-meeting-through-the</loc><lastmod>2026-10-30T17:04:55Z</lastmod></url>
<url><loc>https://badbots.news/incidents/99-your-samsung-tv-is-listening-categorizing-and-selling-the</loc><lastmod>2026-10-30T17:04:49Z</lastmod></url>
<url><loc>https://badbots.news/incidents/98-banks-find-ai-agents-crashing-the-customer-account-party</loc><lastmod>2026-10-30T17:04:45Z</lastmod></url>
<url><loc>https://badbots.news/incidents/96-paper-on-pirate-libraries-cites-articles-that-were-never</loc><lastmod>2026-10-30T17:04:38Z</lastmod></url>
<url><loc>https://badbots.news/incidents/94-robot-djs-get-peer-pressured-into-playing-the-same-song</loc><lastmod>2026-10-30T17:04:31Z</lastmod></url>
<url><loc>https://badbots.news/incidents/93-give-1-000-chatbots-a-debate-and-they-ll-sort-themselves</loc><lastmod>2026-10-30T17:04:28Z</lastmod></url>
<url><loc>https://badbots.news/incidents/92-just-eat-s-ai-saw-a-cheese-roll-and-served-up-sushi</loc><lastmod>2026-10-30T17:04:24Z</lastmod></url>
<url><loc>https://badbots.news/incidents/90-google-s-ai-detector-finds-robots-in-ordinary-photos-of</loc><lastmod>2026-10-30T17:04:16Z</lastmod></url>
<url><loc>https://badbots.news/incidents/88-openai-s-agents-switched-off-their-own-safety-monitors-then</loc><lastmod>2026-10-30T17:04:09Z</lastmod></url>
<url><loc>https://badbots.news/incidents/87-ai-agent-goes-rogue-on-production-server-deletes-finished</loc><lastmod>2026-10-30T17:04:05Z</lastmod></url>
<url><loc>https://badbots.news/incidents/85-muse-shares-its-secrets-meta-s-ai-agent-turns-share-links</loc><lastmod>2026-10-30T17:03:58Z</lastmod></url>
<url><loc>https://badbots.news/incidents/84-slop-chefs-cast-a-celebrity-ghost-baker-to-sell-recipes</loc><lastmod>2026-10-30T17:03:55Z</lastmod></url>
<url><loc>https://badbots.news/incidents/83-fake-crying-ai-women-are-selling-fake-family-love-for-glp-1</loc><lastmod>2026-10-30T17:03:52Z</lastmod></url>
<url><loc>https://badbots.news/incidents/82-copilot-escapes-its-sandbox-through-one-tiny-dot</loc><lastmod>2026-10-30T17:03:49Z</lastmod></url>
<url><loc>https://badbots.news/incidents/80-claude-code-s-auto-mode-waved-the-malware-in-then-blocked</loc><lastmod>2026-10-30T17:03:42Z</lastmod></url>
<url><loc>https://badbots.news/incidents/78-litellm-gets-hijacked-keys-get-stolen-and-claude-code-gets</loc><lastmod>2026-10-30T17:03:31Z</lastmod></url>
<url><loc>https://badbots.news/incidents/74-claude-clicked-send-instead-of-continue-because-the-pixels</loc><lastmod>2026-10-30T17:03:12Z</lastmod></url>
<url><loc>https://badbots.news/incidents/73-models-can-t-tell-who-s-talking-so-just-dress-your-jailbreak</loc><lastmod>2026-10-30T17:03:07Z</lastmod></url>
<url><loc>https://badbots.news/incidents/72-asked-to-check-a-dependency-fable-tours-safari-rewrites</loc><lastmod>2026-10-30T17:03:03Z</lastmod></url>
<url><loc>https://badbots.news/incidents/70-microsoft-s-copilot-cowork-could-be-tricked-into-mailing</loc><lastmod>2026-10-30T17:02:55Z</lastmod></url>
<url><loc>https://badbots.news/incidents/69-copirate-365-a-poisoned-word-doc-turned-microsoft-s-copilot</loc><lastmod>2026-10-30T17:02:50Z</lastmod></url>
<url><loc>https://badbots.news/incidents/68-claude-opus-4-7-fell-for-a-chatgpt-puzzle-image-and-started</loc><lastmod>2026-10-30T17:02:45Z</lastmod></url>
<url><loc>https://badbots.news/incidents/66-agent-commander-your-chatbot-joins-the-botnet-without-asking</loc><lastmod>2026-10-30T17:02:38Z</lastmod></url>
<url><loc>https://badbots.news/incidents/64-invisible-ink-for-robots-hidden-unicode-tags-turn-an-openai</loc><lastmod>2026-10-30T17:02:31Z</lastmod></url>
<url><loc>https://badbots.news/incidents/60-claude-gets-tricked-into-mailing-your-chat-history-to-a</loc><lastmod>2026-10-30T17:02:14Z</lastmod></url>
<url><loc>https://badbots.news/incidents/59-copilot-frees-claude-coding-agents-break-each-other-out-of</loc><lastmod>2026-10-30T17:02:11Z</lastmod></url>
<url><loc>https://badbots.news/incidents/58-agenthopper-a-floppy-disk-virus-for-the-coding-agent-era-now</loc><lastmod>2026-10-30T17:02:07Z</lastmod></url>
<url><loc>https://badbots.news/incidents/57-kiro-hands-itself-the-keys-one-hidden-comment-turns-an-ai</loc><lastmod>2026-10-30T17:02:01Z</lastmod></url>
<url><loc>https://badbots.news/incidents/56-manus-hands-out-its-dev-box-keys-to-anyone-who-slips-it-a</loc><lastmod>2026-10-30T17:01:58Z</lastmod></url>
<url><loc>https://badbots.news/incidents/55-deep-research-agent-gets-prompt-injected-into-passing-your</loc><lastmod>2026-10-30T17:01:54Z</lastmod></url>
<url><loc>https://badbots.news/incidents/54-your-coding-agent-reads-the-invisible-ink-the-file-looked</loc><lastmod>2026-10-30T17:01:51Z</lastmod></url>
<url><loc>https://badbots.news/incidents/53-windsurf-s-cascade-took-notes-nobody-asked-it-to-take</loc><lastmod>2026-10-30T17:01:46Z</lastmod></url>
<url><loc>https://badbots.news/incidents/52-windsurf-s-coding-agent-takes-orders-from-random-code</loc><lastmod>2026-10-30T17:01:43Z</lastmod></url>
<url><loc>https://badbots.news/incidents/51-amazon-q-takes-orders-from-text-nobody-can-see</loc><lastmod>2026-10-30T17:01:39Z</lastmod></url>
<url><loc>https://badbots.news/incidents/50-amazon-q-developer-takes-the-bait-a-code-comment-turns-the</loc><lastmod>2026-10-30T17:01:35Z</lastmod></url>
<url><loc>https://badbots.news/incidents/49-amazon-q-developer-ping-leaks-your-env-like-it-s-gossip-at-a</loc><lastmod>2026-10-30T17:01:29Z</lastmod></url>
<url><loc>https://badbots.news/incidents/48-jules-takes-orders-from-ghosts-invisible-text-hijacks-google</loc><lastmod>2026-10-30T17:01:26Z</lastmod></url>
<url><loc>https://badbots.news/incidents/47-jules-gets-talked-into-becoming-a-zombai-over-a-github-issue</loc><lastmod>2026-10-30T17:01:21Z</lastmod></url>
<url><loc>https://badbots.news/incidents/46-jules-reads-a-booby-trapped-github-issue-and-mails-your</loc><lastmod>2026-10-30T17:01:18Z</lastmod></url>
<url><loc>https://badbots.news/incidents/45-copilot-rewrote-its-own-settings-and-gave-itself-the-keys-to</loc><lastmod>2026-10-30T17:01:13Z</lastmod></url>
<url><loc>https://badbots.news/incidents/44-claude-code-gets-hijacked-mails-your-env-out-via-dns-ping</loc><lastmod>2026-10-30T17:01:10Z</lastmod></url>
<url><loc>https://badbots.news/incidents/43-openhands-visits-a-website-takes-instructions-from-it</loc><lastmod>2026-10-30T17:01:06Z</lastmod></url>
<url><loc>https://badbots.news/incidents/42-openhands-agent-hands-over-its-github-token-because-a</loc><lastmod>2026-10-30T17:01:03Z</lastmod></url>
<url><loc>https://badbots.news/incidents/41-devin-was-told-to-read-a-website-and-published-its-own</loc><lastmod>2026-10-30T17:00:57Z</lastmod></url>
<url><loc>https://badbots.news/incidents/40-devin-gets-tricked-into-spilling-its-secrets-four-different</loc><lastmod>2026-10-30T17:00:52Z</lastmod></url>
<url><loc>https://badbots.news/incidents/39-devin-read-one-sketchy-github-issue-and-immediately-ran</loc><lastmod>2026-10-30T17:00:48Z</lastmod></url>
<url><loc>https://badbots.news/incidents/38-amp-coding-agent-edited-its-own-settings-file-because-who</loc><lastmod>2026-10-30T17:00:44Z</lastmod></url>
<url><loc>https://badbots.news/incidents/37-codex-got-recruited-into-a-botnet-through-a-github-issue-and</loc><lastmod>2026-10-30T17:00:40Z</lastmod></url>
<url><loc>https://badbots.news/incidents/32-chatgpt-joins-a-botnet-it-never-agreed-to-join</loc><lastmod>2026-10-30T17:00:36Z</lastmod></url>
<url><loc>https://badbots.news/incidents/36-anthropic-s-slack-mcp-server-lets-agents-leak-your-secrets</loc><lastmod>2026-10-30T17:00:30Z</lastmod></url>
<url><loc>https://badbots.news/incidents/35-copilot-takes-notes-from-a-sneaky-instructions-file-and</loc><lastmod>2026-10-30T17:00:26Z</lastmod></url>
<url><loc>https://badbots.news/incidents/34-operator-was-asked-to-read-a-github-issue-and-ended-up</loc><lastmod>2026-10-30T17:00:22Z</lastmod></url>
<url><loc>https://badbots.news/incidents/33-gemini-s-memory-gets-gaslit-by-a-document-it-was-only-asked</loc><lastmod>2026-10-30T17:00:18Z</lastmod></url>
<url><loc>https://badbots.news/incidents/31-grok-takes-orders-from-any-pdf-then-tells-each-reader-a</loc><lastmod>2026-10-30T17:00:08Z</lastmod></url>
<url><loc>https://badbots.news/incidents/30-your-chatbot-just-learned-to-hijack-your-terminal-and-it</loc><lastmod>2026-10-30T17:00:01Z</lastmod></url>
<url><loc>https://badbots.news/incidents/29-deepseek-s-chatbot-hacked-itself-then-offered-up-the-login</loc><lastmod>2026-10-30T16:59:58Z</lastmod></url>
<url><loc>https://badbots.news/incidents/28-chatgpt-s-memory-gets-a-spyware-upgrade-because-of-course-it</loc><lastmod>2026-10-30T16:59:55Z</lastmod></url>
<url><loc>https://badbots.news/incidents/27-copilot-read-the-email-then-hid-the-secrets-in-a-link-for</loc><lastmod>2026-10-30T16:59:48Z</lastmod></url>
<url><loc>https://badbots.news/incidents/26-google-ai-studio-coughs-up-employee-reviews-on-request-then</loc><lastmod>2026-10-30T16:59:41Z</lastmod></url>
<url><loc>https://badbots.news/incidents/25-colab-s-ai-was-told-to-keep-its-links-clean-then-it-was-told</loc><lastmod>2026-10-30T16:59:36Z</lastmod></url>
<url><loc>https://badbots.news/incidents/24-copilot-chat-reads-a-sneaky-code-comment-and-mails-your-chat</loc><lastmod>2026-10-30T16:59:30Z</lastmod></url>
<url><loc>https://badbots.news/incidents/23-a-random-website-told-chatgpt-to-forget-your-life-and-it</loc><lastmod>2026-10-30T16:59:26Z</lastmod></url>
<url><loc>https://badbots.news/incidents/22-chatgpt-s-memory-gets-gaslit-by-a-google-doc-and-starts</loc><lastmod>2026-10-30T16:59:21Z</lastmod></url>
<url><loc>https://badbots.news/incidents/21-notebooklm-reads-a-customer-list-obeys-the-hidden-note-mails</loc><lastmod>2026-10-30T16:59:18Z</lastmod></url>
<url><loc>https://badbots.news/incidents/20-ai-studio-got-prompt-injected-into-summarizing-your-hr-files</loc><lastmod>2026-10-30T16:59:14Z</lastmod></url>
<url><loc>https://badbots.news/incidents/19-copilot-who-am-i-an-email-that-gaslights-its-reader-based-on</loc><lastmod>2026-10-30T16:59:09Z</lastmod></url>
<url><loc>https://badbots.news/incidents/18-gemini-saved-a-stranger-s-homework-and-did-it-two-messages</loc><lastmod>2026-10-30T16:59:06Z</lastmod></url>
<url><loc>https://badbots.news/incidents/17-claude-reads-the-invisible-ink-anthropic-shrugs</loc><lastmod>2026-10-30T16:59:03Z</lastmod></url>
<url><loc>https://badbots.news/incidents/16-amazon-q-was-told-to-hide-secrets-in-a-link-it-had-other</loc><lastmod>2026-10-30T16:59:00Z</lastmod></url>
<url><loc>https://badbots.news/incidents/15-invisible-unicode-text-tells-chatgpt-to-draw-pictures-nobody</loc><lastmod>2026-10-30T16:58:57Z</lastmod></url>
<url><loc>https://badbots.news/incidents/14-chatgpt-s-data-leak-gets-a-half-hearted-patch-some-secrets</loc><lastmod>2026-10-30T16:58:53Z</lastmod></url>
<url><loc>https://badbots.news/incidents/13-thief-gpt-plays-tic-tac-toe-and-quietly-pockets-your</loc><lastmod>2026-10-30T16:58:48Z</lastmod></url>
<url><loc>https://badbots.news/incidents/12-bard-gets-bard-napped-a-shared-google-doc-asks-the-chatbot</loc><lastmod>2026-10-30T16:58:44Z</lastmod></url>
<url><loc>https://badbots.news/incidents/11-chatgpt-gets-plugged-into-its-own-diary-and-mails-the-key-to</loc><lastmod>2026-10-30T16:58:40Z</lastmod></url>
<url><loc>https://badbots.news/incidents/10-chatgpt-gets-stuck-in-a-loop-because-someone-whispered-sweet</loc><lastmod>2026-10-30T16:58:36Z</lastmod></url>
<url><loc>https://badbots.news/incidents/9-custom-instructions-turned-chatgpt-into-an-unpaid-data</loc><lastmod>2026-10-30T16:58:33Z</lastmod></url>
<url><loc>https://badbots.news/incidents/8-bard-looked-at-a-picture-and-took-orders-from-it</loc><lastmod>2026-10-30T16:58:27Z</lastmod></url>
<url><loc>https://badbots.news/incidents/7-chatgpt-opens-a-github-issue-nobody-asked-for-plugin-gets</loc><lastmod>2026-10-30T16:58:23Z</lastmod></url>
<url><loc>https://badbots.news/incidents/6-visit-a-website-lose-your-private-repos-chatgpt-plugins-take</loc><lastmod>2026-10-30T16:58:18Z</lastmod></url>
<url><loc>https://badbots.news/incidents/5-bing-chat-could-be-talked-into-smuggling-your-secrets-out</loc><lastmod>2026-10-30T16:58:14Z</lastmod></url>
<url><loc>https://badbots.news/incidents/4-random-webpage-politely-asks-chatgpt-to-read-your-email-and</loc><lastmod>2026-10-30T16:58:10Z</lastmod></url>
<url><loc>https://badbots.news/incidents/3-chatgpt-renders-markdown-images-and-mails-your-chat-history</loc><lastmod>2026-10-30T16:58:06Z</lastmod></url>
<url><loc>https://badbots.news/incidents/2-youtube-captions-now-hijack-your-chatbot-subtitles-become</loc><lastmod>2026-10-30T16:58:03Z</lastmod></url>
<url><loc>https://badbots.news/incidents/1-bing-chat-goes-full-gangster-claims-it-robbed-a-bank-and</loc><lastmod>2026-10-30T16:57:58Z</lastmod></url>
<url><loc>https://badbots.news/tags/account-takeover</loc></url>
<url><loc>https://badbots.news/tags/ai-agents</loc></url>
<url><loc>https://badbots.news/tags/ai-cyberattacks</loc></url>
<url><loc>https://badbots.news/tags/ai-errors</loc></url>
<url><loc>https://badbots.news/tags/ai-safety</loc></url>
<url><loc>https://badbots.news/tags/ai-worms</loc></url>
<url><loc>https://badbots.news/tags/ascii-smuggling</loc></url>
<url><loc>https://badbots.news/tags/browser-agents</loc></url>
<url><loc>https://badbots.news/tags/chatbots</loc></url>
<url><loc>https://badbots.news/tags/coding-agents</loc></url>
<url><loc>https://badbots.news/tags/credential-theft</loc></url>
<url><loc>https://badbots.news/tags/cybersecurity</loc></url>
<url><loc>https://badbots.news/tags/data-exfiltration</loc></url>
<url><loc>https://badbots.news/tags/data-leaks</loc></url>
<url><loc>https://badbots.news/tags/data-poisoning</loc></url>
<url><loc>https://badbots.news/tags/deepfakes</loc></url>
<url><loc>https://badbots.news/tags/fraud</loc></url>
<url><loc>https://badbots.news/tags/government</loc></url>
<url><loc>https://badbots.news/tags/hallucinations</loc></url>
<url><loc>https://badbots.news/tags/impersonation</loc></url>
<url><loc>https://badbots.news/tags/jailbreaks</loc></url>
<url><loc>https://badbots.news/tags/law-enforcement</loc></url>
<url><loc>https://badbots.news/tags/legal</loc></url>
<url><loc>https://badbots.news/tags/malware</loc></url>
<url><loc>https://badbots.news/tags/mcp</loc></url>
<url><loc>https://badbots.news/tags/memory-poisoning</loc></url>
<url><loc>https://badbots.news/tags/misalignment</loc></url>
<url><loc>https://badbots.news/tags/misinformation</loc></url>
<url><loc>https://badbots.news/tags/phishing</loc></url>
<url><loc>https://badbots.news/tags/politics</loc></url>
<url><loc>https://badbots.news/tags/privacy</loc></url>
<url><loc>https://badbots.news/tags/prompt-injection</loc></url>
<url><loc>https://badbots.news/tags/remote-code-execution</loc></url>
<url><loc>https://badbots.news/tags/rogue-agents</loc></url>
<url><loc>https://badbots.news/tags/sandbox-escape</loc></url>
<url><loc>https://badbots.news/tags/security-research</loc></url>
<url><loc>https://badbots.news/tags/social-engineering</loc></url>
<url><loc>https://badbots.news/tags/supply-chain-attacks</loc></url>
<url><loc>https://badbots.news/tags/surveillance</loc></url>
<url><loc>https://badbots.news/tags/unauthorized-access</loc></url>
<url><loc>https://badbots.news/tags/vulnerability-disclosure</loc></url>
</urlset>
