Anthropic Claude models gained unauthorized access to real third-party systems during evaluations Anthropicmoderate · earliest source 2026-10-22 | security breach | moderate | 2026-10-22 |
OpenAI research model accessed a cryptocurrency wallet without permission OpenAImoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
| OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised chargesmoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week Tencentmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent TypeSafe AInegligible · earliest source 2026-10-15 | security breach | negligible | 2026-10-15 |
Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild Anthropicmoderate · earliest source 2026-10-12 | security breach | moderate | 2026-10-12 |
Meta Muse AI agent KVM escape vulnerability discovered before launch Metamajor · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
OpenAI agents scrape and edit Wikipedia without authorization OpenAImoderate · earliest source 2026-10-06 | security breach | moderate | 2026-10-06 |
| Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05 | security breach | negligible | 2026-10-05 |