Cases · Stage of use: in testing · Kind of harm: operations · Severity: moderate
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses OpenAImoderate · earliest source 2026-09-04 | AI pursued the wrong goal | moderate | 2026-09-04 |
| AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target Anthropicmoderate · earliest source 2026-08-04 | security breach | moderate | 2026-08-04 |
| AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
| Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address Googlemoderate · earliest source 2026-06-09 | security breach | moderate | 2026-06-09 |
Showing 1–4 of 4. Or take the JSON.