AI Risk Wire

Cases · What was exposed: credentials · Kind of harm: third party security

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains
Anthropicmajor · earliest source 2026-10-26		security breachmajor2026-10-26
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23		security breachmoderate2026-10-23
Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20security breachmajor2026-10-20
Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLIminor · earliest source 2026-10-16security breachminor2026-10-16
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10		security breachmajor2026-10-10
Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04security breachmoderate2026-10-04
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropicminor · earliest source 2026-08-05		security breachminor2026-08-05
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23		security breachminor2026-07-23
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21		AI pursued the wrong goalmajor2026-07-21
OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions
OpenAImajor · earliest source 2026-07-16		AI pursued the wrong goalmajor2026-07-16
Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27security breachmajor2025-08-27

Showing 1–11 of 11. Or take the JSON.