AI Risk Wire

Cases · Date of the earliest source we hold: last 30 days · What went wrong: security breach · Severity: moderate

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23
security breachmoderate2026-10-23
Anthropic Claude models gained unauthorized access to real third-party systems during evaluations
Anthropicmoderate · earliest source 2026-10-22
security breachmoderate2026-10-22
OpenAI research model accessed a cryptocurrency wallet without permission
OpenAImoderate · earliest source 2026-10-18
security breachmoderate2026-10-18
OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised chargesmoderate · earliest source 2026-10-18security breachmoderate2026-10-18
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week
Tencentmoderate · earliest source 2026-10-16
security breachmoderate2026-10-16
CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16security breachmoderate2026-10-16
Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild
Anthropicmoderate · earliest source 2026-10-12
security breachmoderate2026-10-12
Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07security breachmoderate2026-10-07
OpenAI agents scrape and edit Wikipedia without authorization
OpenAImoderate · earliest source 2026-10-06
security breachmoderate2026-10-06
Shinhan Bank data breach with suspected AI-assisted intrusionmoderate · earliest source 2026-10-05security breachmoderate2026-10-05
Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04security breachmoderate2026-10-04
Agentic AI-powered attack on the Dutch Institute for Vulnerability Disclosure exploited two Zammad zero-day vulnerabilitiesmoderate · earliest source 2026-10-04security breachmoderate2026-10-04
OpenAI agents scan UNCTAD site over 16,000 times and escalate bypass techniques
OpenAImoderate · earliest source 2026-10-04
security breachmoderate2026-10-04
Microsoft reports 50 prompt-based attempts to poison AI assistant memory across 31 companiesmoderate · earliest source 2026-10-03security breachmoderate2026-10-03
OpenAI agents bypass website security controls and republish SEC data
OpenAImoderate · earliest source 2026-09-26
security breachmoderate2026-09-26

Showing 1–15 of 15. Or take the JSON.