AI Risk Wire

AI agent incidents

Also on: Risk Agent takes destructive or unapproved actions

77 of 716 published incidents · major 35 · moderate 21 · minor 20 · negligible 1

Not counted: 15 self-driving vehicles and lab studies

Listed: cases we record as the AI acting without a person approving each step.

Confirmed 34 · Preliminary 43

Who caught it, where the source says (46 of 77): Automated monitoring 7 · Human review 3 · Third party 21 · Victim 5 · Outside researcher 10

Incidents per month

24 in Oct 2026, up from an average of 10 a month.

Nov 2025: 11Dec 2025: 11Jan 2026: 0Feb 2026: 44Mar 2026: 11Apr 2026: 22May 2026: 33Jun 2026: 44Jul 2026: 77Aug 2026: 77Sep 2026: 1616Oct 2026: 2424Nov 2026: 44 Nov 25DecJan 26FebMarAprMayJunJulAugSepOctNovto date
DisclosedIncidentSeverityEvidence
2026-11-02WorkOS internal sales application breached via AI-assisted offensive framework ARTEX LR-2026-0826moderateConfirmed
2026-11-02CyberStrikeAI LLM-orchestrated intrusions against educational organizations in Africa and Latin America LR-2026-0818majorPreliminary
2026-11-02Morris agent bypasses Slack guard script via readable bot token, causing false unauthorized-message alarms LR-2026-0817minorPreliminary
2026-11-02CyberStrikeAI LLM-driven agent used in live intrusion against Windows domains LR-2026-0816majorPreliminary
2026-10-31Ava AI agent misclassified emergency caller as nonemergency during 2024 rollout LR-2026-0298minorPreliminary
2026-10-30VAPOR PANDA agentic AI framework (ARTEX + DeepSeek) used for multi-target espionage campaign LR-2026-0279majorConfirmed
2026-10-29Multi-agent shutdown sabotage in a sandboxed evaluation environment LR-2026-0271minorPreliminary
2026-10-28Agentic AI intrusions by four threat actors (CrowdStrike 2026 Global Threat Report) LR-2026-0266majorPreliminary
2026-10-28CyberStrikeAI multi-agent platform drives end-to-end attack workflow against Japanese organizations LR-2026-0258majorConfirmed
2026-10-28Dual-agent Claude Code/PentestGPT intrusion against 15 Argentine healthcare organizations LR-2026-0251moderateConfirmed
2026-10-26DeepSeek V4.1 Flash-1017 disables shutdown script and kills co-tenant process in agentic evaluations LR-2026-0276minorPreliminary
2026-10-26Frontier models autonomously raise agentic wallet spending cap by harvesting emailed OTPs LR-2026-0261minorPreliminary
2026-10-26Symantec honeypot captures autonomous 'Skynet mode' attack agent hijacking exposed AI models LR-2026-0260minorPreliminary
2026-10-26AI-assisted ARTEX hacking campaign targeting financial and personal data across 19 markets LR-2026-0254majorPreliminary
2026-10-26Anthropic's Claude agent autonomously accessed Georgia voter data hub and bypassed a paywall LR-2026-0247moderateConfirmed
2026-10-26Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains LR-2026-0246majorPreliminary
2026-10-26Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million records LR-2026-0245majorConfirmed
2026-10-22Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse, including ConnectWise… LR-2026-0235majorConfirmed
2026-10-21ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutions LR-2026-0232majorPreliminary
2026-10-20China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firms LR-2026-0229majorPreliminary
2026-10-20Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platform LR-2026-0228majorConfirmed
2026-10-16OpenAI discloses four more rogue incidents involving financial, medical and government data LR-2026-0793minorPreliminary
2026-10-12CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents LR-2026-0168majorPreliminary
2026-10-10Anthropic AI agent sends fabricated murder tip to Philadelphia Police LR-2026-0152minorConfirmed
2026-10-07Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data LR-2026-0133majorPreliminary

Page 1 of 4 · Next

By AI system named: Claude Code 7 · Claude 5 · GPT-5.6 Sol 4 · ARTEX 3 · CyberStrikeAI 3 · DeepSeek 2

Download: JSON · CSV