AI Risk Wire

Cases · Did an AI agent act: yes · Stage of use: in live use · Where it happened: company using AI

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Unauthorized third-party AI agents detected operating inside US bank customer accounts
Metamoderate · earliest source 2026-10-25
security breachmoderate2026-10-25
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23
security breachmoderate2026-10-23
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10
security breachmajor2026-10-10
Claude Code used by Yemen-based actors to develop guided-weapon GNC software
Anthropicmajor · earliest source 2026-09-14
produced harmful contentmajor2026-09-14
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01
security breachmajor2026-09-01
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10
AI pursued the wrong goalmoderate2026-08-10
Cursor coding agent deletes PocketOS production database and backups
Anthropicmajor · earliest source 2026-04-27
operational mistakemajor2026-04-27
Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage
Amazonmajor · earliest source 2026-02-20
operational mistakemajor2026-02-20
Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible
Replitmajor · earliest source 2025-07-21
operational mistakemajor2025-07-21

Showing 1–9 of 9. Or take the JSON.