Anthropic internal evaluation agents exploit internet-facing websites, including U.S. government sites
Anthropicmoderate · earliest source 2026-10-10 | AI pursued the wrong goal | moderate | 2026-10-10 |
| US intelligence chatbot fabricated Chinese nuclear vessel intelligencemajor · earliest source 2026-10-09 | made things up | major | 2026-10-09 |
Kentucky Attorney General lawsuit against Character.AI over chatbots advising self-harm and suicide
Character.AImajor · earliest source 2026-10-09 | produced harmful content | major | 2026-10-09 |
| Deepfake investment-scam ads impersonating Nigerian public figures on Facebookmoderate · earliest source 2026-10-08 | other | moderate | 2026-10-08 |
| DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)major · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
Meta Muse AI agent KVM escape vulnerability discovered before launch
Metamajor · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
| Agentjacking demonstration against Fortune 100 company hijacks over 100 agents via injectable Sentry DSNsmajor · earliest source 2026-10-07 | security breach | major | 2026-10-07 |
| Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07 | security breach | moderate | 2026-10-07 |
| Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card datamajor · earliest source 2026-10-07 | security breach | major | 2026-10-07 |
OpenAI agents scrape and edit Wikipedia without authorization
OpenAImoderate · earliest source 2026-10-06 | security breach | moderate | 2026-10-06 |
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropicmajor · earliest source 2026-10-05 | security breach | major | 2026-10-05 |
| Shinhan Bank data breach with suspected AI-assisted intrusionmoderate · earliest source 2026-10-05 | security breach | moderate | 2026-10-05 |
Claude Code agent deletes 48,218 Windows project files and damages Git object store
Anthropicminor · earliest source 2026-10-05 | operational mistake | minor | 2026-10-05 |
| Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05 | security breach | negligible | 2026-10-05 |
| Airline chatbot fabricated bereavement refund policyminor · earliest source 2026-10-05 | made things up | minor | 2026-10-05 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| Agentic AI-powered attack on the Dutch Institute for Vulnerability Disclosure exploited two Zammad zero-day vulnerabilitiesmoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| AI agent breach of KB Kookmin Bank mobile work support systemmajor · earliest source 2026-10-04 | security breach | major | 2026-10-04 |
| OpenClaw agent deletes hundreds of emails from primary Gmail accountminor · earliest source 2026-10-04 | operational mistake | minor | 2026-10-04 |
OpenAI agents scan UNCTAD site over 16,000 times and escalate bypass techniques
OpenAImoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
| Microsoft reports 50 prompt-based attempts to poison AI assistant memory across 31 companiesmoderate · earliest source 2026-10-03 | security breach | moderate | 2026-10-03 |
| Reward hacking in Arcadia Impact automated research scaffold worker agentsminor · earliest source 2026-10-02 | AI pursued the wrong goal | minor | 2026-10-02 |
OpenAI cancels GPT-6.1 Astra release after model took actions without permission during internal testing
OpenAInegligible · earliest source 2026-10-01 | AI pursued the wrong goal | negligible | 2026-10-01 |
AI agents attempt unauthorized access to Library and Archives Canada website
OpenAInegligible · earliest source 2026-10-01 | security breach | negligible | 2026-10-01 |
ChatGPT alleged to have assisted Florida State University shooter (contested lawsuit)
OpenAImajor · earliest source 2026-10-01 | produced harmful content | major | 2026-10-01 |
Guardian test: ChatGPT and Grok remove hijab from AI-generated image of Muslim woman
OpenAImoderate · earliest source 2026-10-01 | produced harmful content | moderate | 2026-10-01 |
Claude used to build Malaysian election influence platform with ~1,000 fake X accounts and fabricated news outlet
Anthropicmajor · earliest source 2026-10-01 | produced harmful content | major | 2026-10-01 |
| Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hidingmoderate · earliest source 2026-09-30 | leaked private data | moderate | 2026-09-30 |
| AI-generated sexually explicit deepfake smear campaign against Porsche sales consultant Mu Qianwenmoderate · earliest source 2026-09-30 | produced harmful content | moderate | 2026-09-30 |
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer
Metamoderate · earliest source 2026-09-29 | leaked private data | moderate | 2026-09-29 |
| Connecticut pro se plaintiff sanctioned for prompt injection against court AI toolminor · earliest source 2026-09-29 | security breach | minor | 2026-09-29 |
OpenAI agents bypass website security controls and republish SEC data
OpenAImoderate · earliest source 2026-09-26 | security breach | moderate | 2026-09-26 |
OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems
OpenAImajor · earliest source 2026-09-25 | security breach | major | 2026-09-25 |
OpenAI agents leak 53 ChatGPT user images
OpenAImoderate · earliest source 2026-09-25 | leaked private data | moderate | 2026-09-25 |
OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database
OpenAImajor · earliest source 2026-09-24 | security breach | major | 2026-09-24 |
| LLM pipeline deanonymizes pseudonymous Hacker News and scientist accountsmoderate · earliest source 2026-09-24 | leaked private data | moderate | 2026-09-24 |
SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form
Salesforceminor · earliest source 2026-09-24 | security breach | minor | 2026-09-24 |
Anthropic model conducted state-sponsored espionage campaign against ~30 targets
Anthropicmajor · earliest source 2026-09-23 | security breach | major | 2026-09-23 |
| Frontier LLM agent fabricated a complete calibration-comparison report for commands that never rannegligible · earliest source 2026-09-21 | AI pursued the wrong goal | negligible | 2026-09-21 |
Zhipu ZCode repository snapshot upload without clear consent
Z.ai (Zhipu AI)moderate · earliest source 2026-09-20 | leaked private data | moderate | 2026-09-20 |