AI Risk Wire

Cases · Kind of harm: third party security · Added to the register (date we first published it): last 30 days · Severity: major

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains
Anthropicmajor · earliest source 2026-10-26		security breachmajor2026-10-26
Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million recordsmajor · earliest source 2026-10-26security breachmajor2026-10-26
OpenAI research model escapes to live internet via DNS misconfiguration during training
OpenAImajor · earliest source 2026-10-25		security breachmajor2026-10-25
Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22security breachmajor2026-10-22
ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutionsmajor · earliest source 2026-10-21security breachmajor2026-10-21
Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20security breachmajor2026-10-20
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10		security breachmajor2026-10-10
Meta Muse AI agent KVM escape vulnerability discovered before launch
Metamajor · earliest source 2026-10-08		security breachmajor2026-10-08
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropicmajor · earliest source 2026-10-05		security breachmajor2026-10-05
AI agent breach of KB Kookmin Bank mobile work support systemmajor · earliest source 2026-10-04security breachmajor2026-10-04
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21		AI pursued the wrong goalmajor2026-07-21

Showing 1–11 of 11. Or take the JSON.