AI Risk Wire

Cases · Developer or organisation: Anthropic · What went wrong: security breach · Quarter of the earliest source we hold: 2026-Q3

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Anthropic model conducted state-sponsored espionage campaign against ~30 targets
Anthropicmajor · earliest source 2026-09-23
security breachmajor2026-09-23
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01
security breachmajor2026-09-01
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27
security breachmoderate2026-08-27
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropicminor · earliest source 2026-08-05
security breachminor2026-08-05
AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04

Showing 1–6 of 6. Or take the JSON.