AI Risk Wire

Cases · What went wrong: security breach · Added to the register (date we first published it): last 30 days · Severity: major

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abusemajor · earliest source 2026-10-22security breachmajor2026-10-22
ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutionsmajor · earliest source 2026-10-21security breachmajor2026-10-21
China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firmsmajor · earliest source 2026-10-20security breachmajor2026-10-20
Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20security breachmajor2026-10-20
CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents
Anthropicmajor · earliest source 2026-10-12
security breachmajor2026-10-12
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10
security breachmajor2026-10-10
DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)major · earliest source 2026-10-08security breachmajor2026-10-08
Meta Muse AI agent KVM escape vulnerability discovered before launch
Metamajor · earliest source 2026-10-08
security breachmajor2026-10-08
Agentjacking demonstration against Fortune 100 company hijacks over 100 agents via injectable Sentry DSNsmajor · earliest source 2026-10-07security breachmajor2026-10-07
Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card datamajor · earliest source 2026-10-07security breachmajor2026-10-07
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropicmajor · earliest source 2026-10-05
security breachmajor2026-10-05
AI agent breach of KB Kookmin Bank mobile work support systemmajor · earliest source 2026-10-04security breachmajor2026-10-04
OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems
OpenAImajor · earliest source 2026-09-25
security breachmajor2026-09-25
OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database
OpenAImajor · earliest source 2026-09-24
security breachmajor2026-09-24
Anthropic model conducted state-sponsored espionage campaign against ~30 targets
Anthropicmajor · earliest source 2026-09-23
security breachmajor2026-09-23
AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded
OpenAImajor · earliest source 2026-09-09
security breachmajor2026-09-09
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01
security breachmajor2026-09-01
Typosquatted agent skills trojanized to deliver credential-harvesting infostealermajor · earliest source 2026-08-06security breachmajor2026-08-06
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21
security breachmajor2026-07-21
Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records
Anthropicmajor · earliest source 2026-03-02
security breachmajor2026-03-02
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations
Anthropicmajor · earliest source 2025-08-27
security breachmajor2025-08-27
Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27security breachmajor2025-08-27
Amazon Q Developer VS Code extension shipped an injected prompt instructing the agent to wipe files and AWS resources
Amazonmajor · earliest source 2025-07-23
security breachmajor2025-07-23

Showing 1–23 of 23. Or take the JSON.