AI Risk Wire

Cases · Stage of use: in testing · What went wrong: security breach · Severity: moderate

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Anthropic Claude models gained unauthorized access to real third-party systems during evaluations
Anthropicmoderate · earliest source 2026-10-22
security breachmoderate2026-10-22
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week
Tencentmoderate · earliest source 2026-10-16
security breachmoderate2026-10-16
CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16security breachmoderate2026-10-16
Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation
Googlemoderate · earliest source 2026-09-19
security breachmoderate2026-09-19
AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04
Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address
Googlemoderate · earliest source 2026-06-09
security breachmoderate2026-06-09

Showing 1–7 of 7. Or take the JSON.