AI Risk Wire

file_edit: AI incidents

What has gone wrong with AI systems, where, and how badly.

Clear filters
More filters

2 of 156 incidents, all dates

Risk groupings are set by a model from sentences quoted from each incident's sources. On 2026-10-24 a second model (deepseek-reasoner) classified 55 incidents without seeing those answers: it chose the same grouping for 36; for 10 one of the two left a question unanswered; 9 differ.

ReportedCaptured (UTC)IncidentRisk groupingDeveloperSeverityWhere it happened
2026-10-29 2026-10-29 17:30 Multi-agent shutdown sabotage in a sandboxed evaluation environment Preliminary Not yet classified
Agent misalignment
Not stated minorIn evaluation
2026-09-04
happened 2026-05-11
2026-09-27 13:51 OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses Confirmed AI acting on its own
Agent misalignment
OpenAI moderateIn evaluation

Browse incidents by

Risk grouping: AI acting on its own · Not yet classified · AI used to exploit · AI attacked · Misuse by its own users · AI failing in normal use · Harm by design · Supply chain attack

Kind of failure: Security compromise · Agent misalignment · Harmful output · Operational error · Privacy leak · Other kind · Hallucination · IP infringement · Physical safety

Developer: OpenAI · Anthropic · Google · Meta · Alibaba · Amazon · Character.AI · DeepSeek · Tesla · Waymo · xAI · Amazon Web Services · Character Technologies, Inc. · Deloitte · Perplexity · Replit · Salesforce · Tencent · TypeSafe AI · Univerads Technology Limited · Z.AI · Z.ai (Zhipu AI)

Model: Claude · ChatGPT · Mythos 5 · Claude Code · Muse · Codex · GPT-5.6 Sol · Astra · Gemini · Gemini 3.1 Pro · GLM-5.3

Agent or product: Claude Code · ARTEX · ChatGPT · OpenClaw · Character.AI · Codex · Cursor · OpenAI agents

Tools it had: shell · browser · code_execution · email · bash · file_read · python · internet · internet_access · mythic · network · code_generation · exploitation · file_edit · file_upload · file_write · messaging · network_access · package_install · reconnaissance

How much it acted alone: Acted alone, unwatched · Acted alone, watched by a person · It suggested; a person acted

Sector: Information · Finance and Insurance · Public administration · Retail Trade · Software Publishers · technology · Transportation and Warehousing · AI platform / intermediary services · AI safety research · Artificial intelligence research and development · Arts, Entertainment, and Recreation · Autonomous vehicle / robotaxi transportation · Cloud computing · critical infrastructure and e-commerce · CRM software · Cybersecurity · education · Educational Services · Fitness and recreational sports centers · Food Manufacturing · Government AI safety and security evaluation · government AI safety evaluation · Health Care and Social Assistance · Healthcare · Healthcare and government · Industrial automation, electronics manufacturing, semiconductors, pharmaceuticals, shipping, tire manufacturing, petrochemicals, and data center services · Information Security research · Insurance · Legal services · Open knowledge platform / nonprofit encyclopedia · political campaigns · Professional, Scientific, and Technical Services · Public administration and government · Research and development in AI safety · Retail · Retail Trade; Transportation and Warehousing; Finance and Insurance · Scientific research and light source user facility · Software / AI coding tools · Software development / information sector · Software publishing / npm ecosystem

Severity: major · moderate · minor · negligible · severe

Where it happened: In production · In evaluation · In training · In research