AI Risk Wire

Cases · Developer or organisation: OpenAI · Kind of harm: third party security · Quarter of the earliest source we hold: 2026-Q3

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems
OpenAImajor · earliest source 2026-09-25		security breachmajor2026-09-25
OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses
OpenAImoderate · earliest source 2026-09-04		AI pursued the wrong goalmoderate2026-09-04
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAImoderate · earliest source 2026-08-05		security breachmoderate2026-08-05
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23		security breachminor2026-07-23
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21		AI pursued the wrong goalmajor2026-07-21
OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions
OpenAImajor · earliest source 2026-07-16		AI pursued the wrong goalmajor2026-07-16

Showing 1–6 of 6. Or take the JSON.