AI Risk Wire

Cases · Did an AI agent act: yes · Added to the register (date we first published it): today · What set it off: hidden instructions in its input

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Indirect prompt injection attempts embedded in HTTP response headers across websitesminor · earliest source 2026-10-16security breachminor2026-10-16
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10
security breachmajor2026-10-10
Agentjacking demonstration against Fortune 100 company hijacks over 100 agents via injectable Sentry DSNsmajor · earliest source 2026-10-07security breachmajor2026-10-07
Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07security breachmoderate2026-10-07
Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05security breachnegligible2026-10-05
Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04security breachmoderate2026-10-04

Showing 1–6 of 6. Or take the JSON.