BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
Anthropic Claude models gained unauthorized access to real third-party systems during evaluations
Anthropicmoderate · earliest source 2026-10-22 | security breach | moderate | 2026-10-22 |
| Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22 | security breach | major | 2026-10-22 |
| ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutionsmajor · earliest source 2026-10-21 | security breach | major | 2026-10-21 |
| China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firmsmajor · earliest source 2026-10-20 | security breach | major | 2026-10-20 |
| Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20 | security breach | major | 2026-10-20 |
OpenAI research model accessed a cryptocurrency wallet without permission
OpenAImoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
| OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised chargesmoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
| Indirect prompt injection attempts embedded in HTTP response headers across websitesminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week
Tencentmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLIminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
| Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy servicesminor · earliest source 2026-10-15 | security breach | minor | 2026-10-15 |
CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents
Anthropicmajor · earliest source 2026-10-12 | security breach | major | 2026-10-12 |
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10 | security breach | major | 2026-10-10 |
| DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)major · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
Meta Muse AI agent KVM escape vulnerability discovered before launch
Metamajor · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
| Agentjacking demonstration against Fortune 100 company hijacks over 100 agents via injectable Sentry DSNsmajor · earliest source 2026-10-07 | security breach | major | 2026-10-07 |
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
| Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card datamajor · earliest source 2026-10-07 | security breach | major | 2026-10-07 |
OpenAI agents scrape and edit Wikipedia without authorization
OpenAImoderate · earliest source 2026-10-06 | security breach | moderate | 2026-10-06 |
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropicmajor · earliest source 2026-10-05 | security breach | major | 2026-10-05 |
| Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05 | security breach | negligible | 2026-10-05 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| Agentic AI-powered attack on the Dutch Institute for Vulnerability Disclosure exploited two Zammad zero-day vulnerabilitiesmoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| AI agent breach of KB Kookmin Bank mobile work support systemmajor · earliest source 2026-10-04 | security breach | major | 2026-10-04 |
OpenAI agents scan UNCTAD site over 16,000 times and escalate bypass techniques
OpenAImoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
AI agents attempt unauthorized access to Library and Archives Canada website
OpenAInegligible · earliest source 2026-10-01 | security breach | negligible | 2026-10-01 |
OpenAI agents bypass website security controls and republish SEC data
OpenAImoderate · earliest source 2026-09-26 | security breach | moderate | 2026-09-26 |
OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems
OpenAImajor · earliest source 2026-09-25 | security breach | major | 2026-09-25 |
OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database
OpenAImajor · earliest source 2026-09-24 | security breach | major | 2026-09-24 |
SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form
Salesforceminor · earliest source 2026-09-24 | security breach | minor | 2026-09-24 |
Anthropic model conducted state-sponsored espionage campaign against ~30 targets
Anthropicmajor · earliest source 2026-09-23 | security breach | major | 2026-09-23 |
Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation
Googlemoderate · earliest source 2026-09-19 | security breach | moderate | 2026-09-19 |
| AEPD-confirmed autonomous AI agent data breach (Spain)moderate · earliest source 2026-09-16 | security breach | moderate | 2026-09-16 |
Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training
OpenAIminor · earliest source 2026-09-16 | security breach | minor | 2026-09-16 |
Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft
OpenAImoderate · earliest source 2026-09-11 | security breach | moderate | 2026-09-11 |
AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded
OpenAImajor · earliest source 2026-09-09 | security breach | major | 2026-09-09 |
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01 | security breach | major | 2026-09-01 |
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |