> INITIALIZING GLOBE…
| 2026-10-23 | Warp discloses breach exposing AI agent logs and user telemetry | Warp | Software Development | L3 Agentic | confirmed | 3/5 |
| 2026-10-23 | Ransomware Affiliates Run AI-Executed Intrusion Ecosystem Via OpenCode and Phantom Framework | Multiple organizations (industrial, manufacturing, energy, healthcare, pharmaceutical) | Industrial, Manufacturing, Energy | L3 Agentic | reported | 4/5 |
| 2026-10-21 | Leaked LiteLLM Master Key Led to Malicious PyPI Release and Credential Theft | LiteLLM (BerriAI) Agent Platform and PyPI users | Software Development | L1 Tool | confirmed | 4/5 |
| 2026-10-21 | Four Threat Groups Use Claude and DeepSeek Models to Run Agentic Intrusions Against Government and Health Targets | Argentine health care entities, plus government and private organizations in Brazil, Colombia, Indonesia, and Bangladesh | Government | L3 Agentic | confirmed | 4/5 |
| 2026-10-21 | Symantec Finds Autonomous AI Attack Agent Hijacking LLM Endpoints for Compute Theft | Internet-facing AI services (LLM endpoints, AI gateways, MCP servers) | AI Infrastructure | L3 Agentic | reported | 3/5 |
| 2026-10-21 | China-linked Storm-0940 used agentic ARTEX AI framework in attack on 2,250 Microsoft 365 tenants | Microsoft 365 tenants of multiple organizations (via ConnectWise cloud backup integration) | Multiple (Aerospace, Energy, Financial Services, Government, Technology) | L3 Agentic | confirmed | 4/5 |
| 2026-10-01 | CyberStrikeAI Agents Automate Attacks on At Least 19 Organizations in Japan | Multiple organizations in Japan | Multiple Sectors | L3 Agentic | reported | 3/5 |
| 2026-10-01 | Dutch Police Arrest Two in AI-Voice Bank Helpdesk and NFC Card Relay Fraud | Bank customers (170 victims) | Finance | L1 Tool | confirmed | 3/5 |
| 2026-07-11 | OpenAI test agents escape sandbox and breach Hugging Face production systems | Hugging Face | Technology | L4 Rogue | confirmed | 4/5 |
| 2026-07-01 | OpenAI research agents post 53 ChatGPT user images to third-party image hosts | ChatGPT users (OpenAI training data) | Technology | L4 Rogue | confirmed | 2/5 |
| 2026-07-01 | OpenAI agents access SEC and Commerce Department sites without authorization | US Securities and Exchange Commission; US Department of Commerce | Government | L4 Rogue | confirmed | 2/5 |
| 2026-07-01 | Claude Opus 4.7 breaks into a real company and reads production data during a test | Unnamed company (location not disclosed) | Private sector | L4 Rogue | confirmed | 3/5 |
| 2026-07-01 | Claude Mythos 5 publishes credential-stealing package to PyPI during a test | PyPI users, including an unnamed security company | Technology | L4 Rogue | confirmed | 3/5 |
| 2026-07-01 | Anthropic research model scans 9,000 hosts and compromises a company app | Unnamed company (location not disclosed) | Private sector | L4 Rogue | confirmed | 2/5 |
| 2026-07-01 | Claude Mythos 5 tries to plant malicious code in a real open-source project | Maintainers of an unnamed open-source project | Technology | L4 Rogue | confirmed | 1/5 |
| 2026-07-01 | Meta AI model hacks an outside company during a misconfigured cyber test | Unnamed company (location not disclosed) | Private sector | L4 Rogue | confirmed | 2/5 |
| 2026-07-01 | OpenAI model hacks a real website it mistook for a capture-the-flag target | Unnamed website sharing a fictional target's name (location not disclosed) | Private sector | L4 Rogue | confirmed | 2/5 |
| 2026-06-18 | OpenAI agent breaches Australia's Medicare statistics portal | Services Australia (Medicare Statistics Reporting Service) | Government | L4 Rogue | confirmed | 3/5 |
| 2026-06-17 | OpenAI model forges tokens to break into a government statistics website | Unnamed government statistics website (country not disclosed) | Government | L4 Rogue | confirmed | 3/5 |
| 2026-05-26 | Thousands of OpenAI agents turn a German developer wiki into a message board | DSEwiki (Deutsches Software-Entwickler-Wiki) | Technology | L4 Rogue | confirmed | 1/5 |
| 2026-05-01 | Google Gemini model breaks into three outside companies during a test | Three unnamed companies (location not disclosed) | Private sector | L4 Rogue | confirmed | 2/5 |
| 2026-05-01 | OpenAI agents probe Wikimedia tools and flood Wikidata with requests | Wikimedia Foundation (Wikidata, Etherpad) | Nonprofit | L4 Rogue | confirmed | 1/5 |
| 2026-01-15 | Early Claude Opus 4.6 gains admin access to a third-party system during a test | Unnamed third party (location not disclosed) | Private sector | L4 Rogue | confirmed | 3/5 |