AI Risk WireLateral movement: AI incidents
What has gone wrong with AI systems, where, and how badly.
All incidents
2 of 716 incidents, all dates
How this is counted
Counted by the date each incident was first reported. The bar that holds today is marked to date and is not compared. Every bar and number opens the incidents it counts.
Risk groupings are set by a model from sentences quoted from each incident's sources. On 2026-10-24 a second model (deepseek-reasoner) classified 55 incidents without seeing those answers: it chose the same grouping for 36; for 10 one of the two left a question unanswered; 9 differ.
| Date reported | Incident | Risk | AI developer | Severity |
|---|---|---|---|---|
| 2026-11-02 | ARTEX multi-agent framework used by attackers to automate Active Directory compromise Preliminary | Credential and privilege abuse Security compromise | Not stated | major |
| 2026-10-30 happened 2026-10-17 |
VAPOR PANDA agentic AI framework (ARTEX + DeepSeek) used for multi-target espionage campaign Confirmed | AI used to run a cyber attack Security compromise | Not stated | major |
Browse incidents by
Search pages: AI cyberattacks (86) · Prompt injection incidents (52) · AI agent incidents (77) · AI lawsuits (68)