AI Risk Wire

AI agent incidents

Also on: Risk Agent takes destructive or unapproved actions

77 of 716 published incidents · major 35 · moderate 21 · minor 20 · negligible 1

Not counted: 15 self-driving vehicles and lab studies

Listed: cases we record as the AI acting without a person approving each step.

Confirmed 34 · Preliminary 43

Who caught it, where the source says (46 of 77): Automated monitoring 7 · Human review 3 · Third party 21 · Victim 5 · Outside researcher 10

Incidents per month

24 in Oct 2026, up from an average of 10 a month.

Nov 2025: 11Dec 2025: 11Jan 2026: 0Feb 2026: 44Mar 2026: 11Apr 2026: 22May 2026: 33Jun 2026: 44Jul 2026: 77Aug 2026: 77Sep 2026: 1616Oct 2026: 2424Nov 2026: 44 Nov 25DecJan 26FebMarAprMayJunJulAugSepOctNovto date
DisclosedIncidentSeverityEvidence
2025-08-27Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration LR-2025-0041majorConfirmed
2025-07-21Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible LR-2025-0031majorConfirmed

Previous · Page 4 of 4

By AI system named: Claude Code 7 · Claude 5 · GPT-5.6 Sol 4 · ARTEX 3 · CyberStrikeAI 3 · DeepSeek 2

Download: JSON · CSV