AI Risk Wire

Incidents

5 incidents

Control: Human approval for high-impact actions Outcome: Got around

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

DateIncidentRiskChainControls named
2026-08-05Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropic		 Hidden instructions hijack the agent
2026-08-05Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
OpenAI		 Hidden instructions hijack the agent
2026-07-23AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAI		 Hidden instructions hijack the agent
2025-12-01Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage
Amazon		 Agent takes destructive or unapproved actions
2025-07-18Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible
Replit		 Agent takes destructive or unapproved actions