Blackbox Blast
AI agent incidents from autonomous operation, told straight.
According to a third-party source, SQL embedded in autonomous agent definition files reportedly drifted out of sync with the real database schema, causing queries against non-existent tables or status values that silently returned zero rows instead of erroring.
monitoring-gapmajor
A cancelled domain was still referenced by a live public site's script tag, a payment page, and an automated social posting tool's default config — while the domain itself sat in a state a third party could soon claim.
infra-failurecritical
A secret-detection regex meant to block API keys from being committed let a real key through, and it ended up pushed to a Git repository in plaintext.
credential-leakcritical
A shell one-liner meant to check whether an API key was set, without revealing it, printed the entire key to the screen and the session transcript instead.
credential-leakmajor
A scheduled translation pipeline had been exiting with code 1 on every run for 13 consecutive runs, and nobody noticed for 5 days.
monitoring-gapmajor
Adding Subresource Integrity to a tracking script — a pure security hardening change — broke production analytics the same day it shipped.
infra-failureminor