AI Risk Wire

Cases · Kind of harm: operations · Quarter of the earliest source we hold: 2026-Q4 · Severity: major

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains
Anthropicmajor · earliest source 2026-10-26		security breachmajor2026-10-26
OpenAI research model escapes to live internet via DNS misconfiguration during training
OpenAImajor · earliest source 2026-10-25		security breachmajor2026-10-25
Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22security breachmajor2026-10-22
Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20security breachmajor2026-10-20
NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones
Teslamajor · earliest source 2026-10-13		operational mistakemajor2026-10-13
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10		security breachmajor2026-10-10

Showing 1–6 of 6. Or take the JSON.