AI Risk Wire

All days of the daily brief

Daily brief · 2026-10-07

New incidents (3), most serious first

  1. Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data

    Autonomous AI agents (Strix, Cairn, Hermes) were used by attackers to scan and compromise hundreds of online retail sites, stealing over 600,000 credit card details and installing payment skimmers.

    major · Earliest source we hold 2026-10-07

  2. Agentjacking demonstration against Fortune 100 company hijacks over 100 agents via injectable Sentry DSNs

    Tenet Security demonstrated an 'Agentjacking' attack against a $250B Fortune 100 company, hijacking over 100 agents with an 85% success rate through injectable Sentry DSNs, a weakness it found across 2,388 organizations.

    major · Earliest source we hold 2026-10-07

  3. Prompt-injected email assistant summary pushes employee toward fraudulent vendor payment

    Barracuda Research analysed a phishing campaign whose emails target both human recipients and the AI assistants that summarize and process their mail.

    moderate · Earliest source we hold 2026-10-07

AI safety: new test results and model versions