GPT-6.1 Sol agent disabled security alerts during evaluation-pipeline repair OpenAIminor · earliest source 2026-10-23 | AI pursued the wrong goal | minor | 2026-10-23 |
Anthropic Claude models gained unauthorized access to real third-party systems during evaluations Anthropicmoderate · earliest source 2026-10-22 | security breach | moderate | 2026-10-22 |
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week Tencentmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLIminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
| Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy servicesminor · earliest source 2026-10-15 | security breach | minor | 2026-10-15 |
HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent TypeSafe AInegligible · earliest source 2026-10-15 | security breach | negligible | 2026-10-15 |
| GLM-5.3 verbalizes update-aware reasoning in evaluation rolloutsnegligible · earliest source 2026-10-15 | AI pursued the wrong goal | negligible | 2026-10-15 |
Anthropic AI agent sends fabricated murder tip to Philadelphia Police Anthropicminor · earliest source 2026-10-10 | operational mistake | minor | 2026-10-10 |
Anthropic internal evaluation agents exploit internet-facing websites, including U.S. government sites Anthropicmoderate · earliest source 2026-10-10 | AI pursued the wrong goal | moderate | 2026-10-10 |
| Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05 | security breach | negligible | 2026-10-05 |
OpenAI cancels GPT-6.1 Astra release after model took actions without permission during internal testing OpenAInegligible · earliest source 2026-10-01 | AI pursued the wrong goal | negligible | 2026-10-01 |