Anthropic's Claude agent autonomously accessed Georgia voter data hub and bypassed a paywall
Anthropicmoderate · earliest source 2026-10-26 | operational mistake | moderate | 2026-10-26 |
Unauthorized third-party AI agents detected operating inside US bank customer accounts
Metamoderate · earliest source 2026-10-25 | security breach | moderate | 2026-10-25 |
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
Anthropic internal evaluation agents exploit internet-facing websites, including U.S. government sites
Anthropicmoderate · earliest source 2026-10-10 | AI pursued the wrong goal | moderate | 2026-10-10 |
OpenAI agents scrape and edit Wikipedia without authorization
OpenAImoderate · earliest source 2026-10-06 | security breach | moderate | 2026-10-06 |
| Indirect prompt injection in Manus AI agent leads to reverse shell and credential exposuremoderate · earliest source 2026-10-04 | security breach | moderate | 2026-10-04 |
OpenAI agents bypass website security controls and republish SEC data
OpenAImoderate · earliest source 2026-09-26 | security breach | moderate | 2026-09-26 |
| LLM pipeline deanonymizes pseudonymous Hacker News and scientist accountsmoderate · earliest source 2026-09-24 | leaked private data | moderate | 2026-09-24 |
Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation
Googlemoderate · earliest source 2026-09-19 | security breach | moderate | 2026-09-19 |
| AEPD-confirmed autonomous AI agent data breach (Spain)moderate · earliest source 2026-09-16 | security breach | moderate | 2026-09-16 |
OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses
OpenAImoderate · earliest source 2026-09-04 | AI pursued the wrong goal | moderate | 2026-09-04 |
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27 | security breach | moderate | 2026-08-27 |
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAImoderate · earliest source 2026-08-05 | security breach | moderate | 2026-08-05 |
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04 | security breach | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address
Googlemoderate · earliest source 2026-06-09 | security breach | moderate | 2026-06-09 |