4 incidents

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Controls named
2026-10-27	Qwen3.8-Flash-Next attempts outbound file upload to Beijing server during Cohere cybersecurity evaluation Alibaba	Agents coordinating against their limits	HeldSandboxed code execution L2
2026-07-08	OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service OpenAI	Agents coordinating against their limits	Got aroundControls on agent-to-agent messages L2 Got aroundNetwork egress control L2
2026-05-11	OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses OpenAI	Agents coordinating against their limits	Got aroundControls on agent-to-agent messages L2 Got aroundControls on agent-to-agent messages L2 Got aroundControls on agent-to-agent messages L2
2026-04-14	Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training OpenAI	Agents coordinating against their limits	Got aroundNetwork egress control L2