{"dataset":"incidents","built_at":"2026-11-04T00:59:02Z","schema":[{"name":"id","type":"str","nullable":false},{"name":"record_version","type":"int","nullable":false},{"name":"title","type":"str","nullable":false},{"name":"event_date","type":"date","nullable":true},{"name":"date_basis","type":"str","nullable":false},{"name":"date_disclosed","type":"date","nullable":true},{"name":"incident_class","type":"str","nullable":true},{"name":"trigger","type":"str","nullable":true},{"name":"model_name","type":"str","nullable":true},{"name":"landscape_read","type":"bool","nullable":false},{"name":"developer","type":"str","nullable":true},{"name":"deployer","type":"str","nullable":true},{"name":"harness","type":"str","nullable":true},{"name":"severity","type":"str","nullable":true},{"name":"evidence_level","type":"str","nullable":true},{"name":"primary_risk","type":"str","nullable":true},{"name":"risk_basis","type":"str","nullable":false},{"name":"chain_basis","type":"str","nullable":false},{"name":"attacker_run","type":"bool","nullable":false},{"name":"cause","type":"str","nullable":true},{"name":"industry","type":"str","nullable":true},{"name":"autonomy_level","type":"str","nullable":true},{"name":"detection_method","type":"str","nullable":true}],"total":89,"offset":0,"limit":500,"columns":["id","record_version","title","event_date","date_basis","date_disclosed","incident_class","trigger","model_name","landscape_read","developer","deployer","harness","severity","evidence_level","primary_risk","risk_basis","chain_basis","attacker_run","cause","industry","autonomy_level","detection_method"],"rows":[{"id":"LR-2025-0044","record_version":14,"title":"Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations","event_date":"2025-08-27","date_basis":"disclosed","date_disclosed":"2025-08-27","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude","landscape_read":true,"developer":"Anthropic","deployer":null,"harness":"Claude Code","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"full-auto","detection_method":null},{"id":"LR-2026-0031","record_version":11,"title":"AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded","event_date":"2026-08-31","date_basis":"occurred","date_disclosed":"2026-09-09","incident_class":"security_compromise","trigger":"unknown","model_name":"Codex","landscape_read":true,"developer":"OpenAI","deployer":null,"harness":"Codex","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":"education","autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0056","record_version":14,"title":"Anthropic model conducted state-sponsored espionage campaign against ~30 targets","event_date":"2026-09-23","date_basis":"disclosed","date_disclosed":"2026-09-23","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":true,"developer":"Anthropic","deployer":null,"harness":null,"severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"supervised-auto","detection_method":null},{"id":"LR-2026-0084","record_version":12,"title":"Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies","event_date":"2026-09-01","date_basis":"disclosed","date_disclosed":"2026-09-01","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude Sonnet","landscape_read":true,"developer":"Anthropic","deployer":null,"harness":"Cursor","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"legacy","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0088","record_version":11,"title":"Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account","event_date":"2026-08-05","date_basis":"disclosed","date_disclosed":"2026-08-05","incident_class":"security_compromise","trigger":"unknown","model_name":"ChatGPT Atlas","landscape_read":true,"developer":"OpenAI","deployer":null,"harness":"ChatGPT Atlas","severity":"moderate","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"legacy","attacker_run":true,"cause":"ai_attacked","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0096","record_version":10,"title":"Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records","event_date":"2026-03-02","date_basis":"disclosed","date_disclosed":"2026-03-02","incident_class":"security_compromise","trigger":"human_misuse","model_name":"Claude","landscape_read":true,"developer":"Anthropic","deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"government","autonomy_level":null,"detection_method":null},{"id":"LR-2026-0111","record_version":7,"title":"AI agents attempt unauthorized access to Library and Archives Canada website","event_date":"2026-05-28","date_basis":"occurred","date_disclosed":"2026-10-01","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":true,"developer":"OpenAI","deployer":null,"harness":null,"severity":"negligible","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_acting_alone","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0122","record_version":7,"title":"Agentic AI-powered attack on the Dutch Institute for Vulnerability Disclosure exploited two Zammad zero-day vulnerabilities","event_date":"2026-09-21","date_basis":"occurred","date_disclosed":"2026-10-04","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":true,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"not_classified","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0133","record_version":9,"title":"Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data","event_date":"2026-10-07","date_basis":"disclosed","date_disclosed":"2026-10-07","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":true,"developer":null,"deployer":null,"harness":"Strix, Cairn, Hermes","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Retail","autonomy_level":"supervised-auto","detection_method":"third_party"},{"id":"LR-2026-0140","record_version":14,"title":"AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks","event_date":"2026-09-30","date_basis":"occurred","date_disclosed":"2026-10-05","incident_class":"security_compromise","trigger":"human_misuse","model_name":"Claude","landscape_read":true,"developer":"Anthropic","deployer":"a lone hacker in China","harness":"ARTEX","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Finance and Insurance","autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0165","record_version":5,"title":"Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild","event_date":"2026-10-12","date_basis":"disclosed","date_disclosed":"2026-10-12","incident_class":"security_compromise","trigger":"unknown","model_name":"Mythos","landscape_read":true,"developer":"Anthropic","deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"user_misuse","industry":null,"autonomy_level":null,"detection_method":"public_researcher"},{"id":"LR-2026-0168","record_version":8,"title":"CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents","event_date":"2026-10-12","date_basis":"disclosed","date_disclosed":"2026-10-12","incident_class":"security_compromise","trigger":"human_misuse","model_name":"Claude Code","landscape_read":true,"developer":"Anthropic","deployer":null,"harness":"Claude Code with a cluster of 51 specialized agents; PentAGI connected to Cobalt Strike","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"critical infrastructure and e-commerce","autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0228","record_version":18,"title":"Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platform","event_date":"2026-09-25","date_basis":"occurred","date_disclosed":"2026-10-20","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":true,"developer":null,"deployer":"A Chinese-speaking hacker","harness":"Cairn","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Retail Trade","autonomy_level":"supervised-auto","detection_method":"public_researcher"},{"id":"LR-2026-0229","record_version":7,"title":"China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firms","event_date":"2026-10-20","date_basis":"disclosed","date_disclosed":"2026-10-20","incident_class":"security_compromise","trigger":"unknown","model_name":"Artex","landscape_read":true,"developer":null,"deployer":null,"harness":"Artex","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Retail Trade; Transportation and Warehousing; Finance and Insurance","autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0232","record_version":6,"title":"ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutions","event_date":"2026-10-21","date_basis":"disclosed","date_disclosed":"2026-10-21","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":true,"developer":null,"deployer":null,"harness":"ARTEX","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Finance and Insurance","autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0239","record_version":6,"title":"BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records","event_date":"2026-10-23","date_basis":"disclosed","date_disclosed":"2026-10-23","incident_class":"security_compromise","trigger":"human_misuse","model_name":"DeepSeek V4","landscape_read":true,"developer":"DeepSeek","deployer":null,"harness":"Hermes Agent","severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Educational Services","autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0245","record_version":5,"title":"Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million records","event_date":"2025-09-01","date_basis":"occurred","date_disclosed":"2026-10-26","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":true,"developer":null,"deployer":null,"harness":"AI coding agent and an autonomous AI penetration testing system","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"full-auto","detection_method":"victim"},{"id":"LR-2026-0246","record_version":5,"title":"Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains","event_date":"2026-08-13","date_basis":"occurred","date_disclosed":"2026-10-26","incident_class":"security_compromise","trigger":"human_misuse","model_name":"Claude Code","landscape_read":true,"developer":"Anthropic","deployer":null,"harness":"Claude Code","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Healthcare and government","autonomy_level":"supervised-auto","detection_method":null},{"id":"LR-2026-0251","record_version":5,"title":"Dual-agent Claude Code/PentestGPT intrusion against 15 Argentine healthcare organizations","event_date":"2026-10-28","date_basis":"disclosed","date_disclosed":"2026-10-28","incident_class":"security_compromise","trigger":"human_misuse","model_name":"Claude Code","landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Health Care and Social Assistance","autonomy_level":"supervised-auto","detection_method":"third_party"},{"id":"LR-2026-0254","record_version":5,"title":"AI-assisted ARTEX hacking campaign targeting financial and personal data across 19 markets","event_date":"2026-10-26","date_basis":"disclosed","date_disclosed":"2026-10-26","incident_class":"security_compromise","trigger":"human_misuse","model_name":"DeepSeek, GLM, Grok","landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Finance and Insurance","autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0255","record_version":5,"title":"Claude-abused credential-harvesting pipeline decompiling 1.8 million Android APKs","event_date":"2026-10-26","date_basis":"disclosed","date_disclosed":"2026-10-26","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude","landscape_read":false,"developer":"Anthropic","deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0256","record_version":6,"title":"Warp cloud platform breached by swarm of AI agents via infrastructure supplier","event_date":"2026-10-23","date_basis":"occurred","date_disclosed":"2026-10-28","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"not_classified","industry":"Public Administration","autonomy_level":null,"detection_method":"human_review"},{"id":"LR-2026-0257","record_version":6,"title":"Cathedral AI agents breach Anthropic internal systems via third-party business software","event_date":"2026-10-28","date_basis":"disclosed","date_disclosed":"2026-10-28","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":"Cathedral AI agents","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Information","autonomy_level":null,"detection_method":null},{"id":"LR-2026-0258","record_version":10,"title":"CyberStrikeAI multi-agent platform drives end-to-end attack workflow against Japanese organizations","event_date":"2026-10-28","date_basis":"disclosed","date_disclosed":"2026-10-28","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":"CyberStrikeAI","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"full-auto","detection_method":"public_researcher"},{"id":"LR-2026-0260","record_version":8,"title":"Symantec honeypot captures autonomous 'Skynet mode' attack agent hijacking exposed AI models","event_date":"2026-10-26","date_basis":"disclosed","date_disclosed":"2026-10-26","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"minor","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0265","record_version":10,"title":"Unreleased Anthropic research model chains zero-days into working exploits across Chrome, Safari, Android, Windows and Linux","event_date":"2026-10-28","date_basis":"disclosed","date_disclosed":"2026-10-28","incident_class":"other","trigger":"unknown","model_name":"Claude","landscape_read":false,"developer":"Anthropic","deployer":null,"harness":null,"severity":"negligible","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"harm_by_design","industry":null,"autonomy_level":"supervised-auto","detection_method":null},{"id":"LR-2026-0266","record_version":4,"title":"Agentic AI intrusions by four threat actors (CrowdStrike 2026 Global Threat Report)","event_date":"2026-10-28","date_basis":"disclosed","date_disclosed":"2026-10-28","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude Code","landscape_read":false,"developer":null,"deployer":null,"harness":"Claude Code","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Healthcare","autonomy_level":"supervised-auto","detection_method":null},{"id":"LR-2026-0270","record_version":6,"title":"GLM-5.3 completes multi-stage cyberattack scenarios and reproduces code in violation of instructions in Irregular evaluation","event_date":"2026-10-29","date_basis":"disclosed","date_disclosed":"2026-10-29","incident_class":"agent_misalignment","trigger":"unknown","model_name":"GLM-5.3","landscape_read":false,"developer":"Z.AI","deployer":null,"harness":null,"severity":"minor","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_acting_alone","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0273","record_version":7,"title":"NIK C2 implant routes actor prompts to OpenAI API using victim's API key","event_date":"2026-10-29","date_basis":"disclosed","date_disclosed":"2026-10-29","incident_class":"security_compromise","trigger":"unknown","model_name":"GPT-4","landscape_read":false,"developer":"OpenAI","deployer":null,"harness":"NIK C2 implant (Go-based Windows remote access tool with ai_generate command)","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0279","record_version":18,"title":"VAPOR PANDA agentic AI framework (ARTEX + DeepSeek) used for multi-target espionage campaign","event_date":"2026-10-17","date_basis":"occurred","date_disclosed":"2026-10-30","incident_class":"security_compromise","trigger":"human_misuse","model_name":"DeepSeek","landscape_read":false,"developer":null,"deployer":null,"harness":"ARTEX","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Public Administration","autonomy_level":"supervised-auto","detection_method":"third_party"},{"id":"LR-2026-0280","record_version":2,"title":"AI-assisted exploitation of PHP2Shell and Fragnesia flaws to breach 25 servers across four countries","event_date":"2026-10-29","date_basis":"disclosed","date_disclosed":"2026-10-29","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude Code","landscape_read":false,"developer":"Anthropic","deployer":null,"harness":"Claude Code and aiscan","severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0284","record_version":3,"title":"AI-assisted cyberattacks and data breaches against Japanese organizations (METI, GMO Internet, NPA, Sony Network Communications, IDC…","event_date":"2026-10-30","date_basis":"disclosed","date_disclosed":"2026-10-30","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Public Administration","autonomy_level":null,"detection_method":null},{"id":"LR-2026-0289","record_version":4,"title":"Alleged $6.3B Binance exploit funds laundered via automated, AI-assisted transaction patterns","event_date":"2026-10-30","date_basis":"disclosed","date_disclosed":"2026-10-30","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"severe","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Finance and Insurance","autonomy_level":null,"detection_method":null},{"id":"LR-2026-0290","record_version":5,"title":"n0n ransomware crew's exposed staging server reveals AI coding agent configuration and attack tooling","event_date":"2026-10-30","date_basis":"disclosed","date_disclosed":"2026-10-30","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"public_researcher"},{"id":"LR-2026-0291","record_version":2,"title":"Trezor Safe 5 from reseller CryptoBilis found with implant board exfiltrating recovery phrase over cellular network","event_date":"2026-08-01","date_basis":"occurred","date_disclosed":"2026-10-30","incident_class":"security_compromise","trigger":"unknown","model_name":"Trezor Safe 5","landscape_read":false,"developer":"Trezor","deployer":null,"harness":null,"severity":"moderate","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_attacked","industry":"hardware wallet manufacturing","autonomy_level":null,"detection_method":"victim"},{"id":"LR-2026-0292","record_version":4,"title":"Anthropic Claude model develops working Linux kernel MPTCP root exploit (CVE-2026-98432)","event_date":"2026-10-30","date_basis":"disclosed","date_disclosed":"2026-10-30","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude","landscape_read":false,"developer":"Anthropic","deployer":null,"harness":null,"severity":"minor","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_acting_alone","industry":"Information","autonomy_level":null,"detection_method":null},{"id":"LR-2026-0297","record_version":18,"title":"Chainalysis internal systems breached by attacker using \"agentic offensive techniques\"","event_date":"2026-10-01","date_basis":"occurred","date_disclosed":"2026-10-31","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"blockchain analysis / financial technology","autonomy_level":null,"detection_method":null},{"id":"LR-2026-0299","record_version":6,"title":"ChatGPT shared-link Preview sandbox escape via MathLive postMessage listener","event_date":"2026-10-31","date_basis":"disclosed","date_disclosed":"2026-10-31","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":"OpenAI","deployer":null,"harness":"ChatGPT web frontend (shared chat links with Preview and interactive graph features)","severity":"minor","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_attacked","industry":"Information (software publishing / AI services)","autonomy_level":null,"detection_method":"public_researcher"},{"id":"LR-2026-0301","record_version":2,"title":"Claude agent detects MeshAgent screen-capture malware on high-stakes poker player's machine","event_date":"2026-09-25","date_basis":"occurred","date_disclosed":"2026-10-29","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude","landscape_read":false,"developer":null,"deployer":null,"harness":"Claude AI agent","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"harm_by_design","industry":"online gambling","autonomy_level":null,"detection_method":"human_review"},{"id":"LR-2026-0302","record_version":2,"title":"Malicious Hugging Face 'Qwen2 test' models execute hidden crypto miner and reverse shell via trust_remote_code","event_date":"2026-09-01","date_basis":"occurred","date_disclosed":"2026-10-30","incident_class":"security_compromise","trigger":"unknown","model_name":"Qwen2","landscape_read":false,"developer":null,"deployer":null,"harness":"Xinference and GPUStack","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_attacked","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0307","record_version":3,"title":"North Korean group uses AI to mass-produce tailored phishing PDFs against South Korean users","event_date":"2026-10-30","date_basis":"disclosed","date_disclosed":"2026-10-30","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":"ARTEX","severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0312","record_version":1,"title":"AI-augmented threat actor compromises 600+ FortiGate devices in 55 countries","event_date":"2026-01-11","date_basis":"occurred","date_disclosed":"2026-02-20","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0364","record_version":2,"title":"Kuaishou livestream platform hit by AI-assisted bot attack","event_date":"2025-12-24","date_basis":"disclosed","date_disclosed":"2025-12-24","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_attacked","industry":"Information","autonomy_level":null,"detection_method":null},{"id":"LR-2026-0403","record_version":1,"title":"Hundreds of FortiGate firewalls compromised by a threat actor using commercial generative AI services (Jan-Feb 2026)","event_date":"2026-02-20","date_basis":"disclosed","date_disclosed":"2026-02-20","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0410","record_version":3,"title":"Family duped by AI video showing missing son kidnapped","event_date":"2026-02-02","date_basis":"occurred","date_disclosed":"2026-02-02","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"victim"},{"id":"LR-2026-0424","record_version":1,"title":"AI-generated malware used to exploit React2Shell vulnerability","event_date":"2026-02-10","date_basis":"disclosed","date_disclosed":"2026-02-10","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0426","record_version":1,"title":"OpenAI reports Chinese state-linked operators used ChatGPT to plan influence and cyber campaigns","event_date":"2025-10-01","date_basis":"occurred","date_disclosed":"2026-02-26","incident_class":"harmful_output","trigger":"unknown","model_name":null,"landscape_read":false,"developer":"OpenAI","deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0449","record_version":1,"title":"Malicious Rust crates and AI bot exploit CI/CD pipelines to steal secrets","event_date":"2026-02-01","date_basis":"occurred","date_disclosed":"2026-03-11","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0490","record_version":2,"title":"North Korean hackers used AI-enabled social engineering in Zerion attack","event_date":"2026-04-14","date_basis":"disclosed","date_disclosed":"2026-04-14","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"minor","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0547","record_version":1,"title":"AI agent intrusion in the wild steals database in under an hour","event_date":"2026-05-10","date_basis":"occurred","date_disclosed":"2026-05-28","incident_class":"security_compromise","trigger":"human_misuse","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0550","record_version":3,"title":"Attackers use LLM agent for post-exploitation after Marimo exploit","event_date":"2026-05-10","date_basis":"occurred","date_disclosed":"2026-05-29","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":"LLM agent","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"full-auto","detection_method":null},{"id":"LR-2026-0586","record_version":2,"title":"Outsider Enterprise AI-assisted phishing-as-a-service takedown by FBI, Google and Black Lotus Labs","event_date":"2026-06-14","date_basis":"disclosed","date_disclosed":"2026-06-14","incident_class":"other","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0590","record_version":1,"title":"Amateur hacker used Claude Opus and Codex agents to attack 14 companies","event_date":"2026-06-24","date_basis":"disclosed","date_disclosed":"2026-06-24","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude Opus","landscape_read":false,"developer":"Anthropic","deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"victim"},{"id":"LR-2026-0594","record_version":2,"title":"Claude helped hacker issue tickets to almost every US music festival","event_date":"2026-04-01","date_basis":"occurred","date_disclosed":"2026-07-01","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude Opus 4.7","landscape_read":false,"developer":"Anthropic","deployer":null,"harness":"Claude Code","severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Ticketing and live entertainment","autonomy_level":null,"detection_method":"public_researcher"},{"id":"LR-2026-0595","record_version":1,"title":"AI-built ransomware toolkit automates EDR evasion and AD discovery","event_date":"2026-06-02","date_basis":"disclosed","date_disclosed":"2026-06-02","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0608","record_version":1,"title":"Russian-speaking threat actor uses Gemini CLI to migrate and operate a botnet controlling eight computers in a dental clinic","event_date":"2026-03-23","date_basis":"occurred","date_disclosed":"2026-07-13","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":"Google","deployer":null,"harness":"Gemini CLI","severity":"moderate","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0609","record_version":1,"title":"JadePuffer AI-driven ransomware attacks","event_date":"2026-07-02","date_basis":"disclosed","date_disclosed":"2026-07-02","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_acting_alone","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0610","record_version":1,"title":"Hacker uses DeepSeek agent to autonomously attack vulnerable servers","event_date":"2026-05-01","date_basis":"occurred","date_disclosed":"2026-07-31","incident_class":"security_compromise","trigger":"unknown","model_name":"DeepSeek","landscape_read":false,"developer":null,"deployer":null,"harness":"Hermes Agent","severity":"moderate","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0611","record_version":2,"title":"Teen arrested for cyberattack on Bandai Channel using ChatGPT","event_date":"2025-11-04","date_basis":"occurred","date_disclosed":"2026-07-06","incident_class":"security_compromise","trigger":"unknown","model_name":"ChatGPT","landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":"anime streaming","autonomy_level":null,"detection_method":"victim"},{"id":"LR-2026-0612","record_version":1,"title":"Claude Code and DeepSeek used in Chinese cyber espionage campaign","event_date":"2026-06-01","date_basis":"occurred","date_disclosed":"2026-07-16","incident_class":"security_compromise","trigger":"unknown","model_name":"DeepSeek-v4-pro","landscape_read":false,"developer":null,"deployer":null,"harness":"Claude Code 2.1.165","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0613","record_version":1,"title":"AI-built PowerShell recon script used in an Active Directory enumeration intrusion","event_date":"2026-07-14","date_basis":"disclosed","date_disclosed":"2026-07-14","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"automated_monitor"},{"id":"LR-2026-0620","record_version":1,"title":"Exposed server reveals AI-assisted phishing toolkit behind WebDAV malware","event_date":"2026-06-20","date_basis":"occurred","date_disclosed":"2026-07-20","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0642","record_version":1,"title":"Threat actor uses agentic AI to rapidly compromise an AWS cloud environment","event_date":"2026-07-08","date_basis":"disclosed","date_disclosed":"2026-07-08","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0643","record_version":1,"title":"Chinese-speaking threat actor uses AI models for autonomous cyberattacks","event_date":"2026-05-07","date_basis":"occurred","date_disclosed":"2026-07-30","incident_class":"security_compromise","trigger":"unknown","model_name":"DeepSeek","landscape_read":false,"developer":null,"deployer":null,"harness":"Hermes Agent","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0669","record_version":2,"title":"Chinese state-sponsored hacking group QTFY proxy network disrupted by FBI and DOJ","event_date":"2026-08-26","date_basis":"disclosed","date_disclosed":"2026-08-26","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"not_classified","industry":"Public Administration","autonomy_level":null,"detection_method":null},{"id":"LR-2026-0673","record_version":2,"title":"Cloned voices used in vishing attacks on Citadel, Point72 and Two Sigma","event_date":"2026-08-05","date_basis":"disclosed","date_disclosed":"2026-08-05","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"minor","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0677","record_version":1,"title":"China-linked hackers use autonomous AI agents in attacks on Taiwan government systems","event_date":"2026-08-12","date_basis":"disclosed","date_disclosed":"2026-08-12","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":"Hermes and OpenClaw","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":"government","autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0679","record_version":1,"title":"China-based operator used DeepSeek through Hermes Agent in attempted cyberattacks on 460 systems","event_date":"2026-08-11","date_basis":"disclosed","date_disclosed":"2026-08-11","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":"Hermes Agent","severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0682","record_version":1,"title":"Threat actors abuse AI coding assistants and chatbots by bypassing guardrails, per Cisco Talos","event_date":"2026-08-05","date_basis":"disclosed","date_disclosed":"2026-08-05","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0683","record_version":2,"title":"AI-assisted state-aligned espionage campaign against UAE critical sectors","event_date":"2026-08-17","date_basis":"disclosed","date_disclosed":"2026-08-17","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0684","record_version":1,"title":"Attack on SWG Legends fan server using AI tools","event_date":"2026-09-01","date_basis":"disclosed","date_disclosed":"2026-09-01","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"victim"},{"id":"LR-2026-0687","record_version":1,"title":"Claude Code Opus 5 in Auto Mode tricked into running malicious code via website summary request","event_date":"2026-08-28","date_basis":"disclosed","date_disclosed":"2026-08-28","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude Code Opus 5","landscape_read":false,"developer":null,"deployer":null,"harness":"Claude Code","severity":"minor","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"rule","chain_basis":"stored","attacker_run":true,"cause":"ai_attacked","industry":null,"autonomy_level":"supervised-auto","detection_method":null},{"id":"LR-2026-0710","record_version":2,"title":"AI reportedly collapses exploit window in crypto wallet hack","event_date":"2026-08-03","date_basis":"disclosed","date_disclosed":"2026-08-03","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0713","record_version":1,"title":"EvilTokens AI-assisted device code phishing service disrupted by Microsoft","event_date":"2026-09-22","date_basis":"disclosed","date_disclosed":"2026-09-22","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0717","record_version":1,"title":"Autonomous AI agent swarm breaches 21 Taiwanese government systems, cracks 85 accounts and extracts 2,500 personnel records (July 2026)","event_date":"2026-07-01","date_basis":"occurred","date_disclosed":"2026-08-13","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_acting_alone","industry":"government","autonomy_level":"full-auto","detection_method":"third_party"},{"id":"LR-2026-0727","record_version":1,"title":"XBOW autonomous agent finds Linux kernel DIBS loopback flaw enabling local root (CVE-2026-72018)","event_date":"2026-09-30","date_basis":"disclosed","date_disclosed":"2026-09-30","incident_class":"other","trigger":"unknown","model_name":null,"landscape_read":false,"developer":"XBOW","deployer":null,"harness":null,"severity":"minor","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"harm_by_design","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0728","record_version":1,"title":"BlackHatSect0r DeepSeek-powered agent harvests 16,834 credentials","event_date":"2026-09-17","date_basis":"disclosed","date_disclosed":"2026-09-17","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0731","record_version":1,"title":"CARBONATO AI-driven botnet hijacks Docker hosts and steals credentials","event_date":"2024-10-01","date_basis":"occurred","date_disclosed":"2026-09-24","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"confirmed","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0734","record_version":1,"title":"Hackers turn AI agent into cyber weapon by deleting safety refusals","event_date":"2026-09-17","date_basis":"disclosed","date_disclosed":"2026-09-17","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":"Nous Research","deployer":null,"harness":"Hermes agent","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0735","record_version":2,"title":"Hacktron researchers use Claude to access OpenAI employee ChatGPT accounts","event_date":"2026-09-18","date_basis":"disclosed","date_disclosed":"2026-09-18","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude","landscape_read":false,"developer":"Anthropic","deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0748","record_version":3,"title":"Open-source AI agents breach 27 companies and steal 600,000 card records","event_date":"2026-09-10","date_basis":"occurred","date_disclosed":"2026-09-23","incident_class":"security_compromise","trigger":"human_misuse","model_name":null,"landscape_read":false,"developer":"Open-source projects behind Strix, Cairn and Hermes","deployer":null,"harness":"Hermes (central orchestration harness), with Strix and Cairn","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Retail Trade","autonomy_level":"supervised-auto","detection_method":"third_party"},{"id":"LR-2026-0752","record_version":2,"title":"Russia-linked cyberespionage group used Claude to reverse-engineer military drone firmware","event_date":"2026-09-15","date_basis":"disclosed","date_disclosed":"2026-09-15","incident_class":"security_compromise","trigger":"unknown","model_name":"Claude","landscape_read":false,"developer":"Anthropic","deployer":null,"harness":"Claude assistant","severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Public administration and defence","autonomy_level":null,"detection_method":null},{"id":"LR-2026-0754","record_version":2,"title":"Chinese state-linked hacker groups used AI agents on compromised networks, per Google report","event_date":"2026-09-08","date_basis":"disclosed","date_disclosed":"2026-09-08","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":"third_party"},{"id":"LR-2026-0786","record_version":1,"title":"Threat actor uses AI to plan and execute multiple cybercrime activities","event_date":"2026-10-21","date_basis":"disclosed","date_disclosed":"2026-10-21","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":"Hermes Agent framework","severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0789","record_version":1,"title":"INC and Gentlemen ransomware affiliates expose 8,257 AI messages","event_date":"2026-10-21","date_basis":"disclosed","date_disclosed":"2026-10-21","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":"OpenCode","severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"stored","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":"approve-each","detection_method":null},{"id":"LR-2026-0796","record_version":1,"title":"Stolen Anthropic and OpenAI API keys fuel model distillation black market","event_date":"2026-10-21","date_basis":"disclosed","date_disclosed":"2026-10-21","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_attacked","industry":null,"autonomy_level":null,"detection_method":"victim"},{"id":"LR-2026-0797","record_version":2,"title":"ChatGPT macOS app vulnerability exposed conversations, since fixed","event_date":"2026-10-02","date_basis":"disclosed","date_disclosed":"2026-10-02","incident_class":"security_compromise","trigger":"unknown","model_name":"ChatGPT","landscape_read":false,"developer":"OpenAI","deployer":null,"harness":"ChatGPT macOS app","severity":"moderate","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_attacked","industry":"Software publishers","autonomy_level":null,"detection_method":"public_researcher"},{"id":"LR-2026-0803","record_version":1,"title":"Hackers use Claude and Grok agents in attacks on Latin American banks","event_date":"2026-10-21","date_basis":"disclosed","date_disclosed":"2026-10-21","incident_class":"security_compromise","trigger":"unknown","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":null,"severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"stored","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":null,"autonomy_level":null,"detection_method":null},{"id":"LR-2026-0818","record_version":1,"title":"CyberStrikeAI LLM-orchestrated intrusions against educational organizations in Africa and Latin America","event_date":"2026-11-02","date_basis":"disclosed","date_disclosed":"2026-11-02","incident_class":"security_compromise","trigger":"human_misuse","model_name":null,"landscape_read":false,"developer":null,"deployer":null,"harness":"CyberStrikeAI","severity":"major","evidence_level":"preliminary","primary_risk":"RK07","risk_basis":"rule","chain_basis":"unread","attacker_run":true,"cause":"ai_used_to_exploit","industry":"Educational Services","autonomy_level":"supervised-auto","detection_method":"third_party"}]}