AI Risk Wire

Cases · Stage of use: in live use · Kind of harm: third party security · What went wrong: security breach

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23		security breachmoderate2026-10-23
Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22security breachmajor2026-10-22
Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20security breachmajor2026-10-20
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10		security breachmajor2026-10-10
Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07security breachmoderate2026-10-07
Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04security breachmoderate2026-10-04
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27		security breachmoderate2026-08-27
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAImoderate · earliest source 2026-08-05		security breachmoderate2026-08-05
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23		security breachminor2026-07-23
Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27security breachmajor2025-08-27
Amazon Q Developer VS Code extension shipped an injected prompt instructing the agent to wipe files and AWS resources
Amazonmajor · earliest source 2025-07-23		security breachmajor2025-07-23

Showing 1–11 of 11. Or take the JSON.