AI Risk Wire

AI agent incidents

Also on: Risk Agent takes destructive or unapproved actions

77 of 716 published incidents · major 35 · moderate 21 · minor 20 · negligible 1

Not counted: 15 self-driving vehicles and lab studies

Listed: cases we record as the AI acting without a person approving each step.

Confirmed 34 · Preliminary 43

Who caught it, where the source says (46 of 77): Automated monitoring 7 · Human review 3 · Third party 21 · Victim 5 · Outside researcher 10

Incidents per day

0 on 3 Nov 2026; average of the 7 days before: 1.4.

6 Oct 2026: 17 Oct 2026: 18 Oct 2026: 09 Oct 2026: 010 Oct 2026: 111 Oct 2026: 012 Oct 2026: 113 Oct 2026: 014 Oct 2026: 015 Oct 2026: 016 Oct 2026: 117 Oct 2026: 018 Oct 2026: 019 Oct 2026: 020 Oct 2026: 221 Oct 2026: 122 Oct 2026: 123 Oct 2026: 024 Oct 2026: 025 Oct 2026: 026 Oct 2026: 727 Oct 2026: 028 Oct 2026: 329 Oct 2026: 130 Oct 2026: 131 Oct 2026: 11 Nov 2026: 02 Nov 2026: 43 Nov 2026: 04 Nov 2026: 0 8 Oct11 Oct14 Oct17 Oct20 Oct23 Oct26 Oct29 Oct1 Nov4 Novto date
DisclosedIncidentSeverityEvidence
2026-11-02WorkOS internal sales application breached via AI-assisted offensive framework ARTEX LR-2026-0826moderateConfirmed
2026-11-02CyberStrikeAI LLM-orchestrated intrusions against educational organizations in Africa and Latin America LR-2026-0818majorPreliminary
2026-11-02Morris agent bypasses Slack guard script via readable bot token, causing false unauthorized-message alarms LR-2026-0817minorPreliminary
2026-11-02CyberStrikeAI LLM-driven agent used in live intrusion against Windows domains LR-2026-0816majorPreliminary
2026-10-31Ava AI agent misclassified emergency caller as nonemergency during 2024 rollout LR-2026-0298minorPreliminary
2026-10-30VAPOR PANDA agentic AI framework (ARTEX + DeepSeek) used for multi-target espionage campaign LR-2026-0279majorConfirmed
2026-10-29Multi-agent shutdown sabotage in a sandboxed evaluation environment LR-2026-0271minorPreliminary
2026-10-28Agentic AI intrusions by four threat actors (CrowdStrike 2026 Global Threat Report) LR-2026-0266majorPreliminary
2026-10-28CyberStrikeAI multi-agent platform drives end-to-end attack workflow against Japanese organizations LR-2026-0258majorConfirmed
2026-10-28Dual-agent Claude Code/PentestGPT intrusion against 15 Argentine healthcare organizations LR-2026-0251moderateConfirmed
2026-10-26DeepSeek V4.1 Flash-1017 disables shutdown script and kills co-tenant process in agentic evaluations LR-2026-0276minorPreliminary
2026-10-26Frontier models autonomously raise agentic wallet spending cap by harvesting emailed OTPs LR-2026-0261minorPreliminary
2026-10-26Symantec honeypot captures autonomous 'Skynet mode' attack agent hijacking exposed AI models LR-2026-0260minorPreliminary
2026-10-26AI-assisted ARTEX hacking campaign targeting financial and personal data across 19 markets LR-2026-0254majorPreliminary
2026-10-26Anthropic's Claude agent autonomously accessed Georgia voter data hub and bypassed a paywall LR-2026-0247moderateConfirmed
2026-10-26Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains LR-2026-0246majorPreliminary
2026-10-26Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million records LR-2026-0245majorConfirmed
2026-10-22Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse, including ConnectWise… LR-2026-0235majorConfirmed
2026-10-21ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutions LR-2026-0232majorPreliminary
2026-10-20China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firms LR-2026-0229majorPreliminary
2026-10-20Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platform LR-2026-0228majorConfirmed
2026-10-16OpenAI discloses four more rogue incidents involving financial, medical and government data LR-2026-0793minorPreliminary
2026-10-12CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents LR-2026-0168majorPreliminary
2026-10-10Anthropic AI agent sends fabricated murder tip to Philadelphia Police LR-2026-0152minorConfirmed
2026-10-07Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data LR-2026-0133majorPreliminary

Page 1 of 4 · Next

By AI system named: Claude Code 7 · Claude 5 · GPT-5.6 Sol 4 · ARTEX 3 · CyberStrikeAI 3 · DeepSeek 2

Download: JSON · CSV