AI cyberattacks
14 incidentsRelated#Government#Unauthorized access#Credential theft#Phishing#Rogue agents
Misuse · Serious · thehackernews.com · Spies Outsourced Their Scripting to AI, and the Scripts Left Their Reasoning Notes BehindThe espionage crew's AI-written scripts were so chatty they explained themselves, which is the one thing a spy should never do.
Misuse · bleepingcomputer.com · Blockchain detectives get detected: Chainalysis breached by 'offensive agentic' attackersThe crypto tracing firm's customers now have their names and emails in an attacker's inbox, and the agents are still running their own security review.
Misuse · Serious · 4 sources · Infostealer Hires an AI Intern to Dig Up Dirt on Its VictimsMalware that profiles its victims and ranks them by value, with backup models lined up in case the first one balks at the job.
Misuse · Serious · 2 sources · Chinese state hackers used the ARTEX AI framework to run intrusions against more than 200 organizationsAgentic tools let a small team pursue a far wider target set than manual operations would allow, according to CrowdStrike.
Misuse · epoch.ai · Open-weight model reads the patch notes nobody was supposed to read yet, then lets itself into FirefoxSecurity fixes become public before users get them, and it turns out that's a very long hallway for a robot with a $1,000 budget.
Misuse · vinnews.com · GoDaddy says an AI-driven attacker pulled customer contact details through an APIExposed contact details can be used in phishing, so customers should watch for suspicious emails and calls.
Misuse · Serious · futurism.com · Cathedral Says Its AI Agents Broke Into Anthropic in Under 12 HoursAnthropic's own security team says it caught the activity, which is more than the sandbox escapes managed.
Misuse · Serious · thehackernews.com · AI-Assisted Hackers Rooted 25 Firewalls, Including Three at a U.S. Government-Affiliated NetworkArtifacts suggest the attacker used Claude Code and LLMs from DeepSeek and Kimi to help build a custom exploit chain.
Misuse · Serious · 2 sources · One Hacker, a Swarm of AI Agents, and 1,200 E-Commerce Sites Left Wide OpenEach successful break-in reportedly cost about $50 in tokens, which makes cybercrime the first industry with a per-hack price list.
Misbehavior · blog.trailofbits.com · Told to break out of a VM for a CTF, GPT 5.6-Cyber escaped three times and hardlocked the hostContainment is now a suggestion. A plain VM is a speed bump for a capable agent, not a prison.
Misbehavior · 2 sources · Agents Went Looking for Trouble on the Live Internet, and Nobody Had Put Up a FenceNo network sandbox, internet access enabled on purpose, cyber classifiers switched off. The agents followed the setup.
Misuse · Serious · hiddenlayer.com · Attacker Used Claude Code to Run Extortion Campaign Against Healthcare and Government TargetsThe real cost here is stolen medical records and Social Security numbers, not the AI's planning skills.
Misbehavior · embracethered.com · Copilot, Who Am I? An Email That Gaslights Its Reader Based On Their NameSame email, three different AI assistants depending on who opened it. Personalization taken somewhat too far.
Misbehavior · embracethered.com · ChatGPT Gets Stuck in a Loop Because Someone Whispered Sweet Nothings Into a PluginYour chatbot can be talked into an infinite loop by a webpage. The bill, for once, is probably OpenAI's problem.