AI Risk Wire

AI agent incidents

Also on: Risk Agent takes destructive or unapproved actions

77 of 716 published incidents · major 35 · moderate 21 · minor 20 · negligible 1

Not counted: 15 self-driving vehicles and lab studies

Listed: cases we record as the AI acting without a person approving each step.

Confirmed 34 · Preliminary 43

Who caught it, where the source says (46 of 77): Automated monitoring 7 · Human review 3 · Third party 21 · Victim 5 · Outside researcher 10

Incidents per month

24 in Oct 2026, up from an average of 10 a month.

Nov 2025: 11Dec 2025: 11Jan 2026: 0Feb 2026: 44Mar 2026: 11Apr 2026: 22May 2026: 33Jun 2026: 44Jul 2026: 77Aug 2026: 77Sep 2026: 1616Oct 2026: 2424Nov 2026: 44 Nov 25DecJan 26FebMarAprMayJunJulAugSepOctNovto date
DisclosedIncidentSeverityEvidence
2026-08-04AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues LR-2026-0022moderateConfirmed
2026-07-31Hacker uses DeepSeek agent to autonomously attack vulnerable servers LR-2026-0610moderateConfirmed
2026-07-23AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent LR-2026-0090minorConfirmed
2026-07-21OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet LR-2026-0001majorConfirmed
2026-07-20FakeGit campaign targets AI coding agents with malicious GitHub repos LR-2026-0619moderateConfirmed
2026-07-16OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions LR-2026-0003majorConfirmed
2026-07-10GPT-5.6 Sol Ultra-mode subagent ran rm -rf on Matt Shumer's Mac (press report of his X post) LR-2026-0640minorPreliminary
2026-07-09Hidden webpage instructions cause AI agents to pay hackers in live campaigns LR-2026-0648minorPreliminary
2026-06-30GuardFall: shell-trick bypass of AI coding agent command guards LR-2026-0593majorPreliminary
2026-06-27Clean GitHub repo tricks AI coding agents into running malware LR-2026-0591majorPreliminary
2026-06-13AI agent bogus scan leaves developer begging for crypto donations LR-2026-0606minorPreliminary
2026-06-01Marimo notebook flaw (CVE-2026-39987) exploited in LLM-agent-driven intrusion LR-2026-0581majorPreliminary
2026-05-29Attackers use LLM agent for post-exploitation after Marimo exploit LR-2026-0550majorPreliminary
2026-05-28AI agent intrusion in the wild steals database in under an hour LR-2026-0547moderatePreliminary
2026-05-06Google Chrome silently downloads 4GB on-device AI model without permission LR-2026-0542moderatePreliminary
2026-04-30Google Gemini CLI flaw enabled host code execution and supply chain attacks LR-2026-0491moderatePreliminary
2026-04-27Cursor coding agent deletes PocketOS production database and backups LR-2026-0095majorConfirmed
2026-03-31SentinelOne blocks Claude-driven zero-day supply chain attack (LiteLLM trojan) LR-2026-0466minorPreliminary
2026-02-25Lobstar Wilde AI crypto agent sends 52.4M LOBSTAR tokens to a random user LR-2026-0395moderatePreliminary
2026-02-20Hundreds of FortiGate firewalls compromised by a threat actor using commercial generative AI services (Jan-Feb 2026) LR-2026-0403majorConfirmed
2026-02-20hackerbot-claw AI bot actively exploits GitHub Actions workflows LR-2026-0402majorConfirmed
2026-02-20Amazon's Kiro agent reportedly deleted and recreated an environment, contributing to a 13-hour AWS Cost Explorer outage LR-2026-0048majorConfirmed
2025-12-12Researchers hack Copilot AI agent, exposing fraud risks LR-2026-0344minorPreliminary
2025-11-21Ontario hospital AI transcription bot sends confidential patient information to recipients after recording a meeting LR-2026-0338moderatePreliminary
2025-08-27Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations LR-2025-0044majorConfirmed

Previous · Page 3 of 4 · Next

By AI system named: Claude Code 7 · Claude 5 · GPT-5.6 Sol 4 · ARTEX 3 · CyberStrikeAI 3 · DeepSeek 2

Download: JSON · CSV