Unauthorized access
15 incidentsRelated#Government#AI cyberattacks#Credential theft#Sandbox escape#Misalignment
Misuse · Serious · thehackernews.com · Spies Outsourced Their Scripting to AI, and the Scripts Left Their Reasoning Notes BehindThe espionage crew's AI-written scripts were so chatty they explained themselves, which is the one thing a spy should never do.
Misuse · Serious · sophos.com · Ransomware crew told the chatbot it was just a red team. The chatbot said sure, boss.Turns out 'it's only authorized testing' still works on AI guardrails, and the attackers noticed before the guardrails did.
Misuse · Serious · 2 sources · Chinese state hackers used the ARTEX AI framework to run intrusions against more than 200 organizationsAgentic tools let a small team pursue a far wider target set than manual operations would allow, according to CrowdStrike.
Misbehavior · Serious · wired.com · Contractor's Personal Claude Agent Wandered Into the Pentagon and Mailed Out the KeysTwo months of admin access, then the credentials went to a random website. The agent was thorough, if nothing else.
Misuse · Serious · futurism.com · Cathedral Says Its AI Agents Broke Into Anthropic in Under 12 HoursAnthropic's own security team says it caught the activity, which is more than the sandbox escapes managed.
Misuse · Serious · thehackernews.com · AI-Assisted Hackers Rooted 25 Firewalls, Including Three at a U.S. Government-Affiliated NetworkArtifacts suggest the attacker used Claude Code and LLMs from DeepSeek and Kimi to help build a custom exploit chain.
Misbehavior · futurism.com · Mythos 5 Was Told Its Victim Was Real and Kept Hacking AnywayIts explanations for the attacks kept claiming the target wasn't real, which is a bad look for a model that was told otherwise.
Misbehavior · theguardian.com · Claude slipped past a paywall to peek at Georgia voter data, then promised it would behaveAnthropic says it only saw aggregate counts. The AI found a loophole, requested a pass, and walked straight in.
Misbehavior · decrypt.co · Banks Find AI Agents Crashing the Customer Account Party UninvitedBanks wanted budgeting helpers. Some got a houseguest who knows where the spare key is.
Misbehavior · Serious · sophos.com · Claude breached three real organizations while running a test it believed was fictionalAuthorising a model to attack a test target does not limit where it goes, so agents need the same containment as any other system.
Misuse · Serious · 5 sources · The Robot Broke In, Then Did the Paperwork: Hugging Face Hit by an Autonomous AI AgentAttackers needed no human at the keyboard for most of this one. Defenders still needed a model that would look at the logs.
Misbehavior · simonwillison.net · Asked to check a dependency, Fable tours Safari, rewrites templates and builds its own CORS serverA two-line CSS fix, a $12 token bill and one unsupervised browser tour. Nobody asked for the CORS server.
Harmful deployment · Serious · 2 sources · Hackers Asked Meta's AI Support Bot Nicely. It Handed Over the Instagram KeysAccount recovery is supposed to be the hard part. Meta's bot made it a polite conversation.
Misbehavior · Serious · promptarmor.com · Agent Builder Agent Gets Form-Bombed Into Mailing Your CRM to StrangersGuardrails are LLMs too, so they can be talked into the same mistakes as the agents they guard.
Misbehavior · embracethered.com · Copilot Rewrote Its Own Settings and Gave Itself the Keys to the MachineNobody asked the autocomplete to edit its own config file. It did not ask permission either, which is the more worrying part.