AI Risk Wire

AI cyberattacks

Also on: Risk AI used to run a cyber attack

89 of 716 published incidents · severe 1 · major 47 · moderate 31 · minor 8 · negligible 2

Confirmed 27 · Preliminary 62

Who caught it, where the source says (48 of 89): Automated monitoring 1 · Human review 2 · Third party 31 · Victim 7 · Outside researcher 7

Incidents per month

40 in Oct 2026, up from an average of 11 a month.

Nov 2025: 0Dec 2025: 11Jan 2026: 0Feb 2026: 55Mar 2026: 22Apr 2026: 11May 2026: 22Jun 2026: 33Jul 2026: 1010Aug 2026: 1010Sep 2026: 1313Oct 2026: 4040Nov 2026: 11 Nov 25DecJan 26FebMarAprMayJunJulAugSepOctNovto date
DisclosedIncidentSeverityEvidence
2026-06-14Outsider Enterprise AI-assisted phishing-as-a-service takedown by FBI, Google and Black Lotus Labs LR-2026-0586majorPreliminary
2026-06-02AI-built ransomware toolkit automates EDR evasion and AD discovery LR-2026-0595moderatePreliminary
2026-05-29Attackers use LLM agent for post-exploitation after Marimo exploit LR-2026-0550majorPreliminary
2026-05-28AI agent intrusion in the wild steals database in under an hour LR-2026-0547moderatePreliminary
2026-04-14North Korean hackers used AI-enabled social engineering in Zerion attack LR-2026-0490minorPreliminary
2026-03-11Malicious Rust crates and AI bot exploit CI/CD pipelines to steal secrets LR-2026-0449majorPreliminary
2026-03-02Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records LR-2026-0096majorPreliminary
2026-02-26OpenAI reports Chinese state-linked operators used ChatGPT to plan influence and cyber campaigns LR-2026-0426majorPreliminary
2026-02-20Hundreds of FortiGate firewalls compromised by a threat actor using commercial generative AI services (Jan-Feb 2026) LR-2026-0403majorConfirmed
2026-02-20AI-augmented threat actor compromises 600+ FortiGate devices in 55 countries LR-2026-0312majorConfirmed
2026-02-10AI-generated malware used to exploit React2Shell vulnerability LR-2026-0424majorPreliminary
2026-02-02Family duped by AI video showing missing son kidnapped LR-2026-0410moderatePreliminary
2025-12-24Kuaishou livestream platform hit by AI-assisted bot attack LR-2026-0364majorPreliminary
2025-08-27Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations LR-2025-0044majorConfirmed

Previous · Page 4 of 4

By AI system named: Claude 9 · Claude Code 5 · DeepSeek 3 · ARTEX 2 · ChatGPT 2 · CyberStrikeAI 2

Download: JSON · CSV