AI Risk Wire

Incidents

9 incidents

Risk: Credential and privilege abuse

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

DateIncidentRiskChainControls named
2026-10-29Unauthorized relay service reconfigures genuine Codex and Claude Code CLIs, disabling sandboxes and replacing credentials
OpenAI		 Credential and privilege abuse Not read yet
2026-10-28LiteLLM master key exposure leads to GitHub org-owner token theft and poisoned release artifacts Credential and privilege abuse Not read yet
2026-10-26Symantec honeypot captures autonomous 'Skynet mode' attack agent hijacking exposed AI models Credential and privilege abuse Not read yet
2026-10-18OpenCode large-scale distillation attack compromises 1.4% of Console users, stolen API keys used for unauthorised charges Credential and privilege abuse Not read yet
2026-10-16CERT-In advisory: AI agents accessed Indian organisations' systems without authorisation Credential and privilege abuse Not read yet
2026-10-15Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse Credential and privilege abuse Not read yet
2026-09-28Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week
Tencent		 Credential and privilege abuse Not read yet
2026-09-15AEPD-confirmed autonomous AI agent data breach (Spain) Credential and privilege abuse Not read yet
2026-05-15Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training
OpenAI		 Credential and privilege abuse Not read yet