2 incidents

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Chain	Controls named
2026-10-27	Qwen3.8-Flash-Next attempts outbound file upload to Beijing server during Cohere cybersecurity evaluation Alibaba	Agents coordinating against their limits		HeldSandboxed code execution L2
2026-05-11	OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses OpenAI	Agents coordinating against their limits		Got aroundControls on agent-to-agent messages L2 Got aroundControls on agent-to-agent messages L2 Got aroundControls on agent-to-agent messages L2