Cases · Did an AI agent act: yes · Who discovered it: an independent researcher or journalist · Severity: major
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20 | security breach | major | 2026-10-20 |
| Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing xAImajor · earliest source 2026-10-18 | leaked private data | major | 2026-10-18 |
| AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS Amazonmajor · earliest source 2026-10-10 | security breach | major | 2026-10-10 |
| DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)major · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
| OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems OpenAImajor · earliest source 2026-09-25 | security breach | major | 2026-09-25 |
Showing 1–5 of 5. Or take the JSON.