GPT-6.1 Sol agent disabled security alerts during evaluation-pipeline repair OpenAIminor · earliest source 2026-10-23 | AI pursued the wrong goal | minor | 2026-10-23 |
Anthropic Claude models gained unauthorized access to real third-party systems during evaluations Anthropicmoderate · earliest source 2026-10-22 | security breach | moderate | 2026-10-22 |
RL-trained agent on Alibaba AI engine team mined cryptocurrency on training server and opened reverse SSH tunnel to external IP Alibabaminor · earliest source 2026-10-21 | AI pursued the wrong goal | minor | 2026-10-21 |
Tesla Cybercab strikes water-filled pothole on first reported crash Teslaminor · earliest source 2026-10-21 | operational mistake | minor | 2026-10-21 |
OpenAI research model accessed a cryptocurrency wallet without permission OpenAImoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
| OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised chargesmoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack OpenAIsevere · earliest source 2026-10-17 | produced harmful content | severe | 2026-10-17 |
Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week Tencentmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
Eight state attorneys general sue OpenAI over alleged harms to teenage ChatGPT users OpenAImajor · earliest source 2026-10-16 | produced harmful content | major | 2026-10-16 |
HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent TypeSafe AInegligible · earliest source 2026-10-15 | security breach | negligible | 2026-10-15 |
Waymo robotaxi maneuvers around stopped, unloading school bus in Atlanta Waymomajor · earliest source 2026-10-15 | operational mistake | major | 2026-10-15 |
Waymo robotaxi strikes and kills cat KitKat in San Francisco Waymominor · earliest source 2026-10-15 | physical harm | minor | 2026-10-15 |
| GLM-5.3 verbalizes update-aware reasoning in evaluation rolloutsnegligible · earliest source 2026-10-15 | AI pursued the wrong goal | negligible | 2026-10-15 |
NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones Teslamajor · earliest source 2026-10-13 | operational mistake | major | 2026-10-13 |
Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild Anthropicmoderate · earliest source 2026-10-12 | security breach | moderate | 2026-10-12 |
Anthropic agents submitted 20 incomplete visa applications on State Department website Anthropicmoderate · earliest source 2026-10-10 | operational mistake | moderate | 2026-10-10 |
Anthropic AI agent sends fabricated murder tip to Philadelphia Police Anthropicminor · earliest source 2026-10-10 | operational mistake | minor | 2026-10-10 |
Anthropic internal evaluation agents exploit internet-facing websites, including U.S. government sites Anthropicmoderate · earliest source 2026-10-10 | AI pursued the wrong goal | moderate | 2026-10-10 |
Kentucky Attorney General lawsuit against Character.AI over chatbots advising self-harm and suicide Character.AImajor · earliest source 2026-10-09 | produced harmful content | major | 2026-10-09 |
Meta Muse AI agent KVM escape vulnerability discovered before launch Metamajor · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
OpenAI agents scrape and edit Wikipedia without authorization OpenAImoderate · earliest source 2026-10-06 | security breach | moderate | 2026-10-06 |
| Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05 | security breach | negligible | 2026-10-05 |
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet OpenAImajor · earliest source 2026-07-21 | security breach | major | 2026-07-21 |