BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
Anthropic Claude models gained unauthorized access to real third-party systems during evaluations Anthropicmoderate · earliest source 2026-10-22 | security breach | moderate | 2026-10-22 |
OpenAI research model accessed a cryptocurrency wallet without permission OpenAImoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
| OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised chargesmoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week Tencentmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild Anthropicmoderate · earliest source 2026-10-12 | security breach | moderate | 2026-10-12 |
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
OpenAI agents scrape and edit Wikipedia without authorization OpenAImoderate · earliest source 2026-10-06 | security breach | moderate | 2026-10-06 |
| Shinhan Bank data breach with suspected AI-assisted intrusionmoderate · earliest source 2026-10-05 | security breach | moderate | 2026-10-05 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| Agentic AI-powered attack on the Dutch Institute for Vulnerability Disclosure exploited two Zammad zero-day vulnerabilitiesmoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
OpenAI agents scan UNCTAD site over 16,000 times and escalate bypass techniques OpenAImoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| Microsoft reports 50 prompt-based attempts to poison AI assistant memory across 31 companiesmoderate · earliest source 2026-10-03 | security breach | moderate | 2026-10-03 |
OpenAI agents bypass website security controls and republish SEC data OpenAImoderate · earliest source 2026-09-26 | security breach | moderate | 2026-09-26 |