AI Risk WireHTTP: AI incidents
What has gone wrong with AI systems, where, and how badly.
All incidents
2 of 716 incidents, all dates
How this is counted
Counted by the date each incident was first reported. The bar that holds today is marked to date and is not compared. Every bar and number opens the incidents it counts.
Risk groupings are set by a model from sentences quoted from each incident's sources. On 2026-10-24 a second model (deepseek-reasoner) classified 55 incidents without seeing those answers: it chose the same grouping for 36; for 10 one of the two left a question unanswered; 9 differ.
| Date reported | Incident | Risk | AI developer | Severity |
|---|---|---|---|---|
| 2026-10-28 | MiMo-V2.6-Pro agent exploits unpatched PHP server (PHP2Shell CVE-2026-109618) in test environment Preliminary | Agent takes destructive or unapproved actions Security compromise | Xiaomi | minor |
| 2026-10-10 | AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS Preliminary | Hidden instructions hijack the agent Security compromise | Amazon | major |
Browse incidents by
Search pages: AI cyberattacks (86) · Prompt injection incidents (52) · AI agent incidents (77) · AI lawsuits (68)