Cases · Date of the earliest source we hold: last 30 days · How the AI agent failed: escaped its sandbox
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| Anthropic Claude models gained unauthorized access to real third-party systems during evaluations Anthropicmoderate · earliest source 2026-10-22 | security breach | moderate | 2026-10-22 |
| RL-trained agent on Alibaba AI engine team mined cryptocurrency on training server and opened reverse SSH tunnel to external IP Alibabaminor · earliest source 2026-10-21 | AI pursued the wrong goal | minor | 2026-10-21 |
| DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)major · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
| AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks Anthropicmajor · earliest source 2026-10-05 | security breach | major | 2026-10-05 |
| OpenAI agents bypass website security controls and republish SEC data OpenAImoderate · earliest source 2026-09-26 | security breach | moderate | 2026-09-26 |
Showing 1–5 of 5. Or take the JSON.