AI Risk Wire

Cases · What was exposed: credentials · What went wrong: security breach · Severity: moderate

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23		security breachmoderate2026-10-23
OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised chargesmoderate · earliest source 2026-10-18security breachmoderate2026-10-18
Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04security breachmoderate2026-10-04
Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation
Googlemoderate · earliest source 2026-09-19		security breachmoderate2026-09-19
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04		security breachmoderate2026-08-04
Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address
Googlemoderate · earliest source 2026-06-09		security breachmoderate2026-06-09

Showing 1–6 of 6. Or take the JSON.