AI Risk Wire

AI cyberattacks

Also on: Risk AI used to run a cyber attack

89 of 716 published incidents · severe 1 · major 47 · moderate 31 · minor 8 · negligible 2

Confirmed 27 · Preliminary 62

Who caught it, where the source says (48 of 89): Automated monitoring 1 · Human review 2 · Third party 31 · Victim 7 · Outside researcher 7

Incidents per month

40 in Oct 2026, up from an average of 11 a month.

Nov 2025: 0Dec 2025: 11Jan 2026: 0Feb 2026: 55Mar 2026: 22Apr 2026: 11May 2026: 22Jun 2026: 33Jul 2026: 1010Aug 2026: 1010Sep 2026: 1313Oct 2026: 4040Nov 2026: 11 Nov 25DecJan 26FebMarAprMayJunJulAugSepOctNovto date
DisclosedIncidentSeverityEvidence
2026-09-09AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded LR-2026-0031majorConfirmed
2026-09-08Chinese state-linked hacker groups used AI agents on compromised networks, per Google report LR-2026-0754moderatePreliminary
2026-09-01Attack on SWG Legends fan server using AI tools LR-2026-0684moderatePreliminary
2026-09-01Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies LR-2026-0084majorPreliminary
2026-08-28Claude Code Opus 5 in Auto Mode tricked into running malicious code via website summary request LR-2026-0687minorConfirmed
2026-08-26Chinese state-sponsored hacking group QTFY proxy network disrupted by FBI and DOJ LR-2026-0669moderatePreliminary
2026-08-17AI-assisted state-aligned espionage campaign against UAE critical sectors LR-2026-0683moderatePreliminary
2026-08-13Autonomous AI agent swarm breaches 21 Taiwanese government systems, cracks 85 accounts and extracts 2,500 personnel records (July 2026) LR-2026-0717moderatePreliminary
2026-08-12China-linked hackers use autonomous AI agents in attacks on Taiwan government systems LR-2026-0677majorPreliminary
2026-08-11China-based operator used DeepSeek through Hermes Agent in attempted cyberattacks on 460 systems LR-2026-0679moderatePreliminary
2026-08-05Threat actors abuse AI coding assistants and chatbots by bypassing guardrails, per Cisco Talos LR-2026-0682moderatePreliminary
2026-08-05Cloned voices used in vishing attacks on Citadel, Point72 and Two Sigma LR-2026-0673minorPreliminary
2026-08-05Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account LR-2026-0088moderateConfirmed
2026-08-03AI reportedly collapses exploit window in crypto wallet hack LR-2026-0710moderatePreliminary
2026-07-31Hacker uses DeepSeek agent to autonomously attack vulnerable servers LR-2026-0610moderateConfirmed
2026-07-30Chinese-speaking threat actor uses AI models for autonomous cyberattacks LR-2026-0643majorPreliminary
2026-07-20Exposed server reveals AI-assisted phishing toolkit behind WebDAV malware LR-2026-0620moderatePreliminary
2026-07-16Claude Code and DeepSeek used in Chinese cyber espionage campaign LR-2026-0612majorPreliminary
2026-07-14AI-built PowerShell recon script used in an Active Directory enumeration intrusion LR-2026-0613moderatePreliminary
2026-07-13Russian-speaking threat actor uses Gemini CLI to migrate and operate a botnet controlling eight computers in a dental clinic LR-2026-0608moderateConfirmed
2026-07-08Threat actor uses agentic AI to rapidly compromise an AWS cloud environment LR-2026-0642moderatePreliminary
2026-07-06Teen arrested for cyberattack on Bandai Channel using ChatGPT LR-2026-0611majorPreliminary
2026-07-02JadePuffer AI-driven ransomware attacks LR-2026-0609majorConfirmed
2026-07-01Claude helped hacker issue tickets to almost every US music festival LR-2026-0594majorConfirmed
2026-06-24Amateur hacker used Claude Opus and Codex agents to attack 14 companies LR-2026-0590majorPreliminary

Previous · Page 3 of 4 · Next

By AI system named: Claude 9 · Claude Code 5 · DeepSeek 3 · ARTEX 2 · ChatGPT 2 · CyberStrikeAI 2

Download: JSON · CSV