AI cyberattacks

Also on: Risk AI used to run a cyber attack

89 of 716 published incidents · severe 1 · major 47 · moderate 31 · minor 8 · negligible 2

Confirmed 27 · Preliminary 62

Who caught it, where the source says (48 of 89): Automated monitoring 1 · Human review 2 · Third party 31 · Victim 7 · Outside researcher 7

Incidents per month

87 so far in 2026; 1 in the same span of 2025.

Disclosed	Incident	Severity	Evidence
2026-11-02	CyberStrikeAI LLM-orchestrated intrusions against educational organizations in Africa and Latin America LR-2026-0818	major	Preliminary
2026-10-31	ChatGPT shared-link Preview sandbox escape via MathLive postMessage listener LR-2026-0299	minor	Confirmed
2026-10-31	Chainalysis internal systems breached by attacker using "agentic offensive techniques" LR-2026-0297	major	Confirmed
2026-10-30	North Korean group uses AI to mass-produce tailored phishing PDFs against South Korean users LR-2026-0307	moderate	Preliminary
2026-10-30	Malicious Hugging Face 'Qwen2 test' models execute hidden crypto miner and reverse shell via trust_remote_code LR-2026-0302	major	Preliminary
2026-10-30	Anthropic Claude model develops working Linux kernel MPTCP root exploit (CVE-2026-98432) LR-2026-0292	minor	Confirmed
2026-10-30	Trezor Safe 5 from reseller CryptoBilis found with implant board exfiltrating recovery phrase over cellular network LR-2026-0291	moderate	Confirmed
2026-10-30	n0n ransomware crew's exposed staging server reveals AI coding agent configuration and attack tooling LR-2026-0290	major	Preliminary
2026-10-30	Alleged $6.3B Binance exploit funds laundered via automated, AI-assisted transaction patterns LR-2026-0289	severe	Preliminary
2026-10-30	AI-assisted cyberattacks and data breaches against Japanese organizations (METI, GMO Internet, NPA, Sony Network Communications, IDC… LR-2026-0284	major	Preliminary
2026-10-30	VAPOR PANDA agentic AI framework (ARTEX + DeepSeek) used for multi-target espionage campaign LR-2026-0279	major	Confirmed
2026-10-29	Claude agent detects MeshAgent screen-capture malware on high-stakes poker player's machine LR-2026-0301	major	Confirmed
2026-10-29	AI-assisted exploitation of PHP2Shell and Fragnesia flaws to breach 25 servers across four countries LR-2026-0280	moderate	Preliminary
2026-10-29	NIK C2 implant routes actor prompts to OpenAI API using victim's API key LR-2026-0273	major	Preliminary
2026-10-29	GLM-5.3 completes multi-stage cyberattack scenarios and reproduces code in violation of instructions in Irregular evaluation LR-2026-0270	minor	Confirmed
2026-10-28	Agentic AI intrusions by four threat actors (CrowdStrike 2026 Global Threat Report) LR-2026-0266	major	Preliminary
2026-10-28	Unreleased Anthropic research model chains zero-days into working exploits across Chrome, Safari, Android, Windows and Linux LR-2026-0265	negligible	Confirmed
2026-10-28	CyberStrikeAI multi-agent platform drives end-to-end attack workflow against Japanese organizations LR-2026-0258	major	Confirmed
2026-10-28	Cathedral AI agents breach Anthropic internal systems via third-party business software LR-2026-0257	major	Confirmed
2026-10-28	Warp cloud platform breached by swarm of AI agents via infrastructure supplier LR-2026-0256	major	Confirmed
2026-10-28	Dual-agent Claude Code/PentestGPT intrusion against 15 Argentine healthcare organizations LR-2026-0251	moderate	Confirmed
2026-10-26	Symantec honeypot captures autonomous 'Skynet mode' attack agent hijacking exposed AI models LR-2026-0260	minor	Preliminary
2026-10-26	Claude-abused credential-harvesting pipeline decompiling 1.8 million Android APKs LR-2026-0255	major	Preliminary
2026-10-26	AI-assisted ARTEX hacking campaign targeting financial and personal data across 19 markets LR-2026-0254	major	Preliminary
2026-10-26	Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains LR-2026-0246	major	Preliminary

Page 1 of 4 · Next

By AI system named: Claude 9 · Claude Code 5 · DeepSeek 3 · ARTEX 2 · ChatGPT 2 · CyberStrikeAI 2

Download: JSON · CSV