Cases · Stage of use: in live use · Themes: agentic ai
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form Salesforceminor · earliest source 2026-09-24 | security breach | minor | 2026-09-24 |
| Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage Amazonmajor · earliest source 2026-02-20 | operational mistake | major | 2026-02-20 |
| Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations Anthropicmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |
Showing 1–4 of 4. Or take the JSON.