Cases · What was exposed: credentials · Quarter of the earliest source we hold: 2026-Q4 · Severity: moderate
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
| OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised chargesmoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
Showing 1–3 of 3. Or take the JSON.