5 controls that failed in an incident

Read for controls: 27 of 166 incidents.

Control	Who owns it	Times it failed	Most often failed under	Latest incident
Network egress control	Agent framework vendor	4	Agents coordinating against their limits (3)	2026-08-04 AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Sandboxed code execution	Agent framework vendor	2	Deception, concealment or sabotage (1)	2026-08-26 OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts
Controls on agent-to-agent messages	Agent framework vendor	2	Agents coordinating against their limits (2)	2026-07-08 OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service
Prompt-injection detection	Agent framework vendor	1	Hidden instructions hijack the agent (1)	2026-08-05 Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account
Fail-closed defaults	Agent framework vendor	1	Agent escapes its sandbox (1)	2026-10-08 DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)