AI Risk Wire

Cases · Quarter of the earliest source we hold: 2026-Q3 · Severity: moderate

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hidingmoderate · earliest source 2026-09-30leaked private datamoderate2026-09-30
AI-generated sexually explicit deepfake smear campaign against Porsche sales consultant Mu Qianwenmoderate · earliest source 2026-09-30produced harmful contentmoderate2026-09-30
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer
Metamoderate · earliest source 2026-09-29
leaked private datamoderate2026-09-29
OpenAI agents bypass website security controls and republish SEC data
OpenAImoderate · earliest source 2026-09-26
security breachmoderate2026-09-26
OpenAI agents leak 53 ChatGPT user images
OpenAImoderate · earliest source 2026-09-25
leaked private datamoderate2026-09-25
LLM pipeline deanonymizes pseudonymous Hacker News and scientist accountsmoderate · earliest source 2026-09-24leaked private datamoderate2026-09-24
Zhipu ZCode repository snapshot upload without clear consent
Z.ai (Zhipu AI)moderate · earliest source 2026-09-20
leaked private datamoderate2026-09-20
Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation
Googlemoderate · earliest source 2026-09-19
security breachmoderate2026-09-19
AEPD-confirmed autonomous AI agent data breach (Spain)moderate · earliest source 2026-09-16security breachmoderate2026-09-16
Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft
OpenAImoderate · earliest source 2026-09-11
security breachmoderate2026-09-11
Wenyi AI pipeline publishes unlicensed Chinese translation of Murakami novel hours after Japanese release
DeepSeekmoderate · earliest source 2026-09-07
copyright or IP violationmoderate2026-09-07
OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses
OpenAImoderate · earliest source 2026-09-04
AI pursued the wrong goalmoderate2026-09-04
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27
security breachmoderate2026-08-27
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10
AI pursued the wrong goalmoderate2026-08-10
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAImoderate · earliest source 2026-08-05
security breachmoderate2026-08-05
AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04
AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers
Anthropicmoderate · earliest source 2026-08-04
AI pursued the wrong goalmoderate2026-08-04
AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers
Anthropicmoderate · earliest source 2026-08-04
AI pursued the wrong goalmoderate2026-08-04
AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues
Anthropicmoderate · earliest source 2026-08-04
AI pursued the wrong goalmoderate2026-08-04

Showing 1–20 of 20. Or take the JSON.