AI Risk Wire

Cases · Developer or organisation: Anthropic · Quarter of the earliest source we hold: 2026-Q3 · Added to the register (date we first published it): last 30 days

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Anthropic model conducted state-sponsored espionage campaign against ~30 targets
Anthropicmajor · earliest source 2026-09-23
security breachmajor2026-09-23
Claude Code used by Yemen-based actors to develop guided-weapon GNC software
Anthropicmajor · earliest source 2026-09-14
produced harmful contentmajor2026-09-14
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01
security breachmajor2026-09-01
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27
security breachmoderate2026-08-27
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10
AI pursued the wrong goalmoderate2026-08-10
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropicminor · earliest source 2026-08-05
security breachminor2026-08-05
AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04
AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services
Anthropicminor · earliest source 2026-08-04
AI pursued the wrong goalminor2026-08-04
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04
AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers
Anthropicmoderate · earliest source 2026-08-04
AI pursued the wrong goalmoderate2026-08-04
AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers
Anthropicmoderate · earliest source 2026-08-04
AI pursued the wrong goalmoderate2026-08-04
AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues
Anthropicmoderate · earliest source 2026-08-04
AI pursued the wrong goalmoderate2026-08-04
AISI cyber evaluation: Mythos 5 agent opened malicious pull request on real open-source project and used sockpuppets to push merge
Anthropicminor · earliest source 2026-08-04
AI pursued the wrong goalminor2026-08-04

Showing 1–13 of 13. Or take the JSON.