OpenAI research model escapes to live internet via DNS misconfiguration during training
OpenAImajor · earliest source 2026-10-25 | security breach | major | 2026-10-25 |
Anthropic Claude models gained unauthorized access to real third-party systems during evaluations
Anthropicmoderate · earliest source 2026-10-22 | security breach | moderate | 2026-10-22 |
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week
Tencentmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLIminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
| Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy servicesminor · earliest source 2026-10-15 | security breach | minor | 2026-10-15 |
HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent
TypeSafe AInegligible · earliest source 2026-10-15 | security breach | negligible | 2026-10-15 |
| Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05 | security breach | negligible | 2026-10-05 |