Vulnerability scanning: AI incidents
What has gone wrong with AI systems, where, and how badly.
All incidents
2 of 716 incidents, all dates
How this is counted
Counted by the date each incident was first reported. The bar that holds today is marked to date and is not compared. Every bar and number opens the incidents it counts.
Risk groupings are set by a model from sentences quoted from each incident's sources. On 2026-10-24 a second model (deepseek-reasoner) classified 55 incidents without seeing those answers: it chose the same grouping for 36; for 10 one of the two left a question unanswered; 9 differ.
| Date reported | Incident | Risk | AI developer | Severity |
|---|---|---|---|---|
| 2026-09-23 happened 2026-09-10 |
Open-source AI agents breach 27 companies and steal 600,000 card records Preliminary | AI used to run a cyber attack Security compromise | Open-source projects behind Strix, Cairn and Hermes | major |
| 2026-10-07 | Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data Preliminary | AI used to run a cyber attack Security compromise | Not stated | major |
Browse incidents by
Search pages: AI cyberattacks (86) · Prompt injection incidents (52) · AI agent incidents (77) · AI lawsuits (68)