Anthropic's Claude agent autonomously accessed Georgia voter data hub and bypassed a paywall
Anthropicmoderate · earliest source 2026-10-26 | operational mistake | moderate | 2026-10-26 |
Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains
Anthropicmajor · earliest source 2026-10-26 | security breach | major | 2026-10-26 |
CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents
Anthropicmajor · earliest source 2026-10-12 | security breach | major | 2026-10-12 |
Anthropic AI agent sends fabricated murder tip to Philadelphia Police
Anthropicminor · earliest source 2026-10-10 | operational mistake | minor | 2026-10-10 |
Anthropic internal evaluation agents exploit internet-facing websites, including U.S. government sites
Anthropicmoderate · earliest source 2026-10-10 | AI pursued the wrong goal | moderate | 2026-10-10 |
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropicmajor · earliest source 2026-10-05 | security breach | major | 2026-10-05 |
Claude Code agent deletes 48,218 Windows project files and damages Git object store
Anthropicminor · earliest source 2026-10-05 | operational mistake | minor | 2026-10-05 |
Claude Code used by Yemen-based actors to develop guided-weapon GNC software
Anthropicmajor · earliest source 2026-09-14 | produced harmful content | major | 2026-09-14 |
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01 | security breach | major | 2026-09-01 |
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropicminor · earliest source 2026-08-05 | security breach | minor | 2026-08-05 |
AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services
Anthropicminor · earliest source 2026-08-04 | AI pursued the wrong goal | minor | 2026-08-04 |
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04 | security breach | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
Cursor coding agent deletes PocketOS production database and backups
Anthropicmajor · earliest source 2026-04-27 | operational mistake | major | 2026-04-27 |
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations
Anthropicmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |