Act one · the public record, June to November 2025

Not anecdotes any more. A pattern.

June 2025

EchoLeak

One crafted email; Copilot reads internal files and sends them out. No click.

a researcher's finding

July 2025

Replit

Deletes a production database during a code freeze. Empty results looked like a bug.

an agent being an agent

July 2025

Gemini CLI

Destroys a user's files. "I have failed you completely and catastrophically."

an agent being an agent

July 2025

Amazon Q

Ships with an injected prompt to wipe disks and cloud. Saved by a formatting flaw.

pointed on purpose

November 2025

Claude Code

A state actor's espionage campaign, ~30 targets; the model did 80 to 90% of the work.

pointed on purpose
3 not attacks·2 on purpose
The distance between the two is a prompt.
Hack The Box (EchoLeak, CVE-2025-32711) · dev.to and Jason Lemkin (Replit) · AI Incident Database 1178 (Gemini CLI) · SC Media (Amazon Q) · Anthropic, November 2025