AI Risk Wire

Cases · Who discovered it: an outside party

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23
security breachmoderate2026-10-23
ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutionsmajor · earliest source 2026-10-21security breachmajor2026-10-21
China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firmsmajor · earliest source 2026-10-20security breachmajor2026-10-20
Nude deepfakes of Austrian MEP Lena Schilling and 49 other MEPs circulated onlinemajor · earliest source 2026-10-18produced harmful contentmajor2026-10-18
Waymo robotaxi maneuvers around stopped, unloading school bus in Atlanta
Waymomajor · earliest source 2026-10-15
operational mistakemajor2026-10-15
CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents
Anthropicmajor · earliest source 2026-10-12
security breachmajor2026-10-12
Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card datamajor · earliest source 2026-10-07security breachmajor2026-10-07
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropicmajor · earliest source 2026-10-05
security breachmajor2026-10-05
AI agents attempt unauthorized access to Library and Archives Canada website
OpenAInegligible · earliest source 2026-10-01
security breachnegligible2026-10-01
Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation
Googlemoderate · earliest source 2026-09-19
security breachmoderate2026-09-19
AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded
OpenAImajor · earliest source 2026-09-09
security breachmajor2026-09-09
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01
security breachmajor2026-09-01
Typosquatted agent skills trojanized to deliver credential-harvesting infostealermajor · earliest source 2026-08-06security breachmajor2026-08-06
Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27security breachmajor2025-08-27

Showing 1–14 of 14. Or take the JSON.