AI Risk Wire

Cases · Did an AI agent act: yes · Who discovered it: an independent researcher or journalist · Severity: minor

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Indirect prompt injection attempts embedded in HTTP response headers across websitesminor · earliest source 2026-10-16security breachminor2026-10-16
Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy servicesminor · earliest source 2026-10-15security breachminor2026-10-15
SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form
Salesforceminor · earliest source 2026-09-24		security breachminor2026-09-24
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23		security breachminor2026-07-23

Showing 1–4 of 4. Or take the JSON.