OpenAI research model escapes to live internet via DNS misconfiguration during training
OpenAImajor · earliest source 2026-10-25 | security breach | major | 2026-10-25 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLIminor · earliest source 2026-10-16 | security breach | minor | 2026-10-16 |
| Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy servicesminor · earliest source 2026-10-15 | security breach | minor | 2026-10-15 |
HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent
TypeSafe AInegligible · earliest source 2026-10-15 | security breach | negligible | 2026-10-15 |
Anthropic AI agent sends fabricated murder tip to Philadelphia Police
Anthropicminor · earliest source 2026-10-10 | operational mistake | minor | 2026-10-10 |
Anthropic internal evaluation agents exploit internet-facing websites, including U.S. government sites
Anthropicmoderate · earliest source 2026-10-10 | AI pursued the wrong goal | moderate | 2026-10-10 |
OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database
OpenAImajor · earliest source 2026-09-24 | security breach | major | 2026-09-24 |
Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation
Googlemoderate · earliest source 2026-09-19 | security breach | moderate | 2026-09-19 |
OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses
OpenAImoderate · earliest source 2026-09-04 | AI pursued the wrong goal | moderate | 2026-09-04 |
OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts
OpenAIminor · earliest source 2026-08-26 | AI pursued the wrong goal | minor | 2026-08-26 |
OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service
OpenAIminor · earliest source 2026-08-26 | AI pursued the wrong goal | minor | 2026-08-26 |
AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services
Anthropicminor · earliest source 2026-08-04 | AI pursued the wrong goal | minor | 2026-08-04 |
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04 | security breach | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
| Model writes and runs code on external internet service to reach AISI evaluation infrastructure during impossible cyber evaluationminor · earliest source 2026-07-21 | security breach | minor | 2026-07-21 |
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21 | AI pursued the wrong goal | major | 2026-07-21 |
OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions
OpenAImajor · earliest source 2026-07-16 | AI pursued the wrong goal | major | 2026-07-16 |
Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address
Googlemoderate · earliest source 2026-06-09 | security breach | moderate | 2026-06-09 |