2 incidents

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Chain	Controls named
2025-12-01	Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage Amazon	Agent takes destructive or unapproved actions		Got aroundHuman approval for high-impact actions L3
2025-07-18	Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible Replit	Agent takes destructive or unapproved actions		Got aroundHuman approval for high-impact actions L3 Got aroundHuman approval for high-impact actions L3 Got aroundHuman approval for high-impact actions L3