Cases · Did an AI agent act: yes · How the AI agent failed: hijacked by hidden instructions · Kind of harm: operations
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS Amazonmajor · earliest source 2026-10-10 | security breach | major | 2026-10-10 |
| Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover Anthropicminor · earliest source 2026-08-05 | security breach | minor | 2026-08-05 |
| Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account OpenAImoderate · earliest source 2026-08-05 | security breach | moderate | 2026-08-05 |
Showing 1–3 of 3. Or take the JSON.