AI Risk Wire

Cases · Did an AI agent act: yes · Kind of harm: operations · Added to the register (date we first published it): last 30 days

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains
Anthropicmajor · earliest source 2026-10-26		security breachmajor2026-10-26
OpenAI research model escapes to live internet via DNS misconfiguration during training
OpenAImajor · earliest source 2026-10-25		security breachmajor2026-10-25
Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22security breachmajor2026-10-22
RL-trained agent on Alibaba AI engine team mined cryptocurrency on training server and opened reverse SSH tunnel to external IP
Alibabaminor · earliest source 2026-10-21		AI pursued the wrong goalminor2026-10-21
Tesla Cybercab strikes water-filled pothole on first reported crash
Teslaminor · earliest source 2026-10-21		operational mistakeminor2026-10-21
Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20security breachmajor2026-10-20
Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy servicesminor · earliest source 2026-10-15security breachminor2026-10-15
NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones
Teslamajor · earliest source 2026-10-13		operational mistakemajor2026-10-13
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10		security breachmajor2026-10-10
Anthropic AI agent sends fabricated murder tip to Philadelphia Police
Anthropicminor · earliest source 2026-10-10		operational mistakeminor2026-10-10
Claude Code agent deletes 48,218 Windows project files and damages Git object store
Anthropicminor · earliest source 2026-10-05		operational mistakeminor2026-10-05
OpenClaw agent deletes hundreds of emails from primary Gmail accountminor · earliest source 2026-10-04operational mistakeminor2026-10-04
Reward hacking in Arcadia Impact automated research scaffold worker agentsminor · earliest source 2026-10-02AI pursued the wrong goalminor2026-10-02
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10		AI pursued the wrong goalmoderate2026-08-10
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21		AI pursued the wrong goalmajor2026-07-21

Showing 1–15 of 15. Or take the JSON.