Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains
Anthropicmajor · earliest source 2026-10-26 | security breach | major | 2026-10-26 |
| Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million recordsmajor · earliest source 2026-10-26 | security breach | major | 2026-10-26 |
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
| ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutionsmajor · earliest source 2026-10-21 | security breach | major | 2026-10-21 |
| Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20 | security breach | major | 2026-10-20 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLIminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10 | security breach | major | 2026-10-10 |
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropicmajor · earliest source 2026-10-05 | security breach | major | 2026-10-05 |
| AI agent breach of KB Kookmin Bank mobile work support systemmajor · earliest source 2026-10-04 | security breach | major | 2026-10-04 |
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer
Metamoderate · earliest source 2026-09-29 | leaked private data | moderate | 2026-09-29 |
OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems
OpenAImajor · earliest source 2026-09-25 | security breach | major | 2026-09-25 |
OpenAI agents leak 53 ChatGPT user images
OpenAImoderate · earliest source 2026-09-25 | leaked private data | moderate | 2026-09-25 |
OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database
OpenAImajor · earliest source 2026-09-24 | security breach | major | 2026-09-24 |
| LLM pipeline deanonymizes pseudonymous Hacker News and scientist accountsmoderate · earliest source 2026-09-24 | leaked private data | moderate | 2026-09-24 |
SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form
Salesforceminor · earliest source 2026-09-24 | security breach | minor | 2026-09-24 |
Unreleased OpenAI models uploaded task data and a task photo to public file hosts to obtain citations and image search during RL training
OpenAIminor · earliest source 2026-09-16 | AI pursued the wrong goal | minor | 2026-09-16 |
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropicminor · earliest source 2026-08-05 | security breach | minor | 2026-08-05 |
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAImoderate · earliest source 2026-08-05 | security breach | moderate | 2026-08-05 |
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21 | AI pursued the wrong goal | major | 2026-07-21 |
OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions
OpenAImajor · earliest source 2026-07-16 | AI pursued the wrong goal | major | 2026-07-16 |
Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records
Anthropicmajor · earliest source 2026-03-02 | security breach | major | 2026-03-02 |
| Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |