8 incidents

Risk: Agent takes destructive or unapproved actions Confirmed

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Controls named
2026-10-21	Tesla Cybercab strikes water-filled pothole on first reported crash Tesla	Agent takes destructive or unapproved actions	Not read yet
2026-10-13	NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones Tesla	Agent takes destructive or unapproved actions	Not read yet
2026-08-10	OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist Anthropic	Agent takes destructive or unapproved actions	Not read yet
2026-08-04	AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target Anthropic	Agent takes destructive or unapproved actions	Not read yet
2026-07-18	Anthropic AI agent sends fabricated murder tip to Philadelphia Police Anthropic	Agent takes destructive or unapproved actions	Not read yet
2026-04-25	Cursor coding agent deletes PocketOS production database and backups Anthropic	Agent takes destructive or unapproved actions	MissingHuman approval for high-impact actions L3 MissingProduction kept apart from test L3
2025-12-01	Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage Amazon	Agent takes destructive or unapproved actions	Got aroundHuman approval for high-impact actions L3
2025-07-18	Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible Replit	Agent takes destructive or unapproved actions	Got aroundHuman approval for high-impact actions L3 Got aroundHuman approval for high-impact actions L3 Got aroundHuman approval for high-impact actions L3