Cases · Did an AI agent act: yes · Kind of harm: operations · Added to the register (date we first published it): last 7 days

What happened	What went wrong	Severity	Earliest source
Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains Anthropicmajor · earliest source 2026-10-26	security breach	major	2026-10-26
OpenAI research model escapes to live internet via DNS misconfiguration during training OpenAImajor · earliest source 2026-10-25	security breach	major	2026-10-25
Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22	security breach	major	2026-10-22
RL-trained agent on Alibaba AI engine team mined cryptocurrency on training server and opened reverse SSH tunnel to external IP Alibabaminor · earliest source 2026-10-21	AI pursued the wrong goal	minor	2026-10-21
Tesla Cybercab strikes water-filled pothole on first reported crash Teslaminor · earliest source 2026-10-21	operational mistake	minor	2026-10-21
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist Anthropicmoderate · earliest source 2026-08-10	AI pursued the wrong goal	moderate	2026-08-10
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet OpenAImajor · earliest source 2026-07-21	AI pursued the wrong goal	major	2026-07-21