AI Risk Wire

Cases · Who discovered it: an independent researcher or journalist · Where it happened: company that built the AI

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week
Tencentmoderate · earliest source 2026-10-16
security breachmoderate2026-10-16
Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild
Anthropicmoderate · earliest source 2026-10-12
security breachmoderate2026-10-12
Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05security breachnegligible2026-10-05
OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems
OpenAImajor · earliest source 2026-09-25
security breachmajor2026-09-25
SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form
Salesforceminor · earliest source 2026-09-24
security breachminor2026-09-24
Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft
OpenAImoderate · earliest source 2026-09-11
security breachmoderate2026-09-11
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27
security breachmoderate2026-08-27
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23
security breachminor2026-07-23

Showing 1–8 of 8. Or take the JSON.