AI Risk Wire

Incidents

6 incidents

Risk: Credential and privilege abuse Last 30 days

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

DateIncidentRiskChainControls named
2026-10-29Unauthorized relay service reconfigures genuine Codex and Claude Code CLIs, disabling sandboxes and replacing credentials
OpenAI		 Credential and privilege abuse Not read yet
2026-10-28LiteLLM master key exposure leads to GitHub org-owner token theft and poisoned release artifacts Credential and privilege abuse Not read yet
2026-10-26Symantec honeypot captures autonomous 'Skynet mode' attack agent hijacking exposed AI models Credential and privilege abuse Not read yet
2026-10-18OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised charges Credential and privilege abuse Not read yet
2026-10-16CERT-In advisory: AI agents accessed Indian organisations' systems without authorisation Credential and privilege abuse Not read yet
2026-10-15Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse Credential and privilege abuse Not read yet