Cases · Who discovered it: an outside party · How the AI agent failed: obeyed a harmful order · Where it happened: company using AI
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents Anthropicmajor · earliest source 2026-10-12 | security breach | major | 2026-10-12 |
| AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded OpenAImajor · earliest source 2026-09-09 | security breach | major | 2026-09-09 |
| Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies Anthropicmajor · earliest source 2026-09-01 | security breach | major | 2026-09-01 |
Showing 1–3 of 3. Or take the JSON.