AI Risk Wire

Incidents

6 incidents

Risk: Credential and privilege abuse Confirmed

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

DateIncidentRiskChainControls named
2026-10-29Unauthorized relay service reconfigures genuine Codex and Claude Code CLIs, disabling sandboxes and replacing credentials
OpenAI		 Credential and privilege abuse Not read yet
2026-10-18OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised charges Credential and privilege abuse Not read yet
2026-10-16CERT-In advisory: AI agents accessed Indian organisations' systems without authorisation Credential and privilege abuse Not read yet
2026-10-15Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse Credential and privilege abuse Not read yet
2026-09-15AEPD-confirmed autonomous AI agent data breach (Spain) Credential and privilege abuse Not read yet
2026-05-15Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training
OpenAI		 Credential and privilege abuse Not read yet