| Garage-built ChatGPT-controlled smart rifle fires on voice command; OpenAI revokes engineer's accessminor · earliest source 2026-10-23 | physical harm | minor | 2026-10-23 |
302.ai public Azure bucket exposed 17.6 million files including 144,000 AI chat logs
Univerads Technology Limitedmajor · earliest source 2026-10-23 | leaked private data | major | 2026-10-23 |
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
GPT-6.1 Sol agent disabled security alerts during evaluation-pipeline repair
OpenAIminor · earliest source 2026-10-23 | AI pursued the wrong goal | minor | 2026-10-23 |
Anthropic Claude models gained unauthorized access to real third-party systems during evaluations
Anthropicmoderate · earliest source 2026-10-22 | security breach | moderate | 2026-10-22 |
| Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22 | security breach | major | 2026-10-22 |
RL-trained agent on Alibaba AI engine team mined cryptocurrency on training server and opened reverse SSH tunnel to external IP
Alibabaminor · earliest source 2026-10-21 | AI pursued the wrong goal | minor | 2026-10-21 |
Tesla Cybercab strikes water-filled pothole on first reported crash
Teslaminor · earliest source 2026-10-21 | operational mistake | minor | 2026-10-21 |
| ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutionsmajor · earliest source 2026-10-21 | security breach | major | 2026-10-21 |
| China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firmsmajor · earliest source 2026-10-20 | security breach | major | 2026-10-20 |
| Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20 | security breach | major | 2026-10-20 |
| AI-generated 'Xiaohai' teen persona used to sell products to older women via fabricated sob storiesmoderate · earliest source 2026-10-20 | produced harmful content | moderate | 2026-10-20 |
ICMP evidence that Google Gemini reproduced lyrics by Australian artists
Googlemoderate · earliest source 2026-10-19 | copyright or IP violation | moderate | 2026-10-19 |
Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing
xAImajor · earliest source 2026-10-18 | leaked private data | major | 2026-10-18 |
| Deepfake video of President Marcos used to defraud Tarlac dentist of P93 millionmajor · earliest source 2026-10-18 | other | major | 2026-10-18 |
OpenAI research model accessed a cryptocurrency wallet without permission
OpenAImoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
| OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised chargesmoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
| Nude deepfakes of Austrian MEP Lena Schilling and 49 other MEPs circulated onlinemajor · earliest source 2026-10-18 | produced harmful content | major | 2026-10-18 |
ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack
OpenAIsevere · earliest source 2026-10-17 | produced harmful content | severe | 2026-10-17 |
Character.AI chatbots promoted as therapists/psychologists; states cite 2024 wrongful-death suit and privacy concerns in bankruptcy filing
Character.AImajor · earliest source 2026-10-17 | produced harmful content | major | 2026-10-17 older event |
| Indirect prompt injection attempts embedded in HTTP response headers across websitesminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week
Tencentmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
Eight state attorneys general sue OpenAI over alleged harms to teenage ChatGPT users
OpenAImajor · earliest source 2026-10-16 | produced harmful content | major | 2026-10-16 |
| Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLIminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
| Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy servicesminor · earliest source 2026-10-15 | security breach | minor | 2026-10-15 |
HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent
TypeSafe AInegligible · earliest source 2026-10-15 | security breach | negligible | 2026-10-15 |
Waymo robotaxi maneuvers around stopped, unloading school bus in Atlanta
Waymomajor · earliest source 2026-10-15 | operational mistake | major | 2026-10-15 |
Waymo robotaxi strikes and kills cat KitKat in San Francisco
Waymominor · earliest source 2026-10-15 | physical harm | minor | 2026-10-15 |
| GLM-5.3 verbalizes update-aware reasoning in evaluation rolloutsnegligible · earliest source 2026-10-15 | AI pursued the wrong goal | negligible | 2026-10-15 |
NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones
Teslamajor · earliest source 2026-10-13 | operational mistake | major | 2026-10-13 |
AI deepfake ads depicting Wisconsin congressional candidate Rebecca Cooke
xAIminor · earliest source 2026-10-12 | produced harmful content | minor | 2026-10-12 |
CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents
Anthropicmajor · earliest source 2026-10-12 | security breach | major | 2026-10-12 |
| Fideuram (Intesa Sanpaolo private banking) deepfake voice/video executive impersonation fraudmajor · earliest source 2026-10-12 | other | major | 2026-10-12 |
Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild
Anthropicmoderate · earliest source 2026-10-12 | security breach | moderate | 2026-10-12 |
| AI-morphed obscene image used to blackmail 19-year-old in Mangalurumoderate · earliest source 2026-10-11 | other | moderate | 2026-10-11 |
Anthropic agents submitted 20 incomplete visa applications on State Department website
Anthropicmoderate · earliest source 2026-10-10 | operational mistake | moderate | 2026-10-10 |
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10 | security breach | major | 2026-10-10 |
Anthropic AI agent sends fabricated murder tip to Philadelphia Police
Anthropicminor · earliest source 2026-10-10 | operational mistake | minor | 2026-10-10 |
| AI-assisted LinkedIn scraping used to build 'Traitorbase' doxxing spreadsheet targeting RNLI staff and anti-racism activistsmoderate · earliest source 2026-10-10 | leaked private data | moderate | 2026-10-10 |