BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
| Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22 | security breach | major | 2026-10-22 |
Tesla Cybercab strikes water-filled pothole on first reported crash
Teslaminor · earliest source 2026-10-21 | operational mistake | minor | 2026-10-21 |
| Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20 | security breach | major | 2026-10-20 |
Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing
xAImajor · earliest source 2026-10-18 | leaked private data | major | 2026-10-18 |
Waymo robotaxi maneuvers around stopped, unloading school bus in Atlanta
Waymomajor · earliest source 2026-10-15 | operational mistake | major | 2026-10-15 |
Waymo robotaxi strikes and kills cat KitKat in San Francisco
Waymominor · earliest source 2026-10-15 | physical harm | minor | 2026-10-15 |
NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones
Teslamajor · earliest source 2026-10-13 | operational mistake | major | 2026-10-13 |
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10 | security breach | major | 2026-10-10 |
| DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)major · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| OpenClaw agent deletes hundreds of emails from primary Gmail accountminor · earliest source 2026-10-04 | operational mistake | minor | 2026-10-04 |
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |