BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
| Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22 | security breach | major | 2026-10-22 |
| Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20 | security breach | major | 2026-10-20 |
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10 | security breach | major | 2026-10-10 |
| DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)major · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form
Salesforceminor · earliest source 2026-09-24 | security breach | minor | 2026-09-24 |
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01 | security breach | major | 2026-09-01 |
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
| Typosquatted agent skills trojanized to deliver credential-harvesting infostealermajor · earliest source 2026-08-06 | security breach | major | 2026-08-06 |
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAImoderate · earliest source 2026-08-05 | security breach | moderate | 2026-08-05 |
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23 | security breach | minor | 2026-07-23 |
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations
Anthropicmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |
| Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |