Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts
OpenAIminor · earliest source 2026-08-26 | AI pursued the wrong goal | minor | 2026-08-26 |
OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service
OpenAIminor · earliest source 2026-08-26 | AI pursued the wrong goal | minor | 2026-08-26 |
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |
| Typosquatted agent skills trojanized to deliver credential-harvesting infostealermajor · earliest source 2026-08-06 | security breach | major | 2026-08-06 |
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropicminor · earliest source 2026-08-05 | security breach | minor | 2026-08-05 |
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAImoderate · earliest source 2026-08-05 | security breach | moderate | 2026-08-05 |
AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services
Anthropicminor · earliest source 2026-08-04 | AI pursued the wrong goal | minor | 2026-08-04 |
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04 | security breach | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training
OpenAIminor · earliest source 2026-08-04 | security breach | minor | 2026-08-04 |
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23 | security breach | minor | 2026-07-23 |
| Model writes and runs code on external internet service to reach AISI evaluation infrastructure during impossible cyber evaluationminor · earliest source 2026-07-21 | security breach | minor | 2026-07-21 |
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21 | AI pursued the wrong goal | major | 2026-07-21 |
OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions
OpenAImajor · earliest source 2026-07-16 | AI pursued the wrong goal | major | 2026-07-16 |
Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address
Googlemoderate · earliest source 2026-06-09 | security breach | moderate | 2026-06-09 |
Cursor coding agent deletes PocketOS production database and backups
Anthropicmajor · earliest source 2026-04-27 | operational mistake | major | 2026-04-27 |
Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage
Amazonmajor · earliest source 2026-02-20 | operational mistake | major | 2026-02-20 |
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations
Anthropicmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |
Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible
Replitmajor · earliest source 2025-07-21 | operational mistake | major | 2025-07-21 |