Latest
●FBI flash alert warns of AI hacking tool Artex●Race condition lets russh SSH agent sign after being locked●Prompt injection flaw exposed .env files in Jet Admin platform●OpenTelemetry Python flaw lets one message stall an agent server●Invoice-processing AI agent could be tricked by email, vendor says●Stopping a misbehaving AI agent is harder than it sounds●OpenAI launches two agentic security tools for offence and defence●Experts urge defence plans against agentic pen-test tools
Saturday, 14 November 2026
0 agent hacks today▼ 4 vs yesterday (4)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

Incidents by month, 2026 · 698 total · click a month to filter
Jan 2026: 23 incidents23JanFeb 2026: 26 incidents26FebMar 2026: 46 incidents46MarApr 2026: 47 incidents47AprMay 2026: 53 incidents53MayJun 2026: 55 incidents55JunJul 2026: 49 incidents49JulAug 2026: 84 incidents84AugSep 2026: 151 incidents151SepOct 2026: 125 incidents125OctNov 2026: 39 incidents39NovDec 2026: 0 incidents0Dec
Incidents by sector · 725 total · click a sector to filter

Highlighted: incidents recorded on 14 November 2026, shown in place among all incidents.Clear

725 incidents

Incident dateIncidentVendorSectorAgentRoot causeSeverityStatus
13 Nov 2026FBI warns of AI-automated hacking tool 'Artex' enabling rapid intrusionsArtextechnologyothertool misuseconfirmed
13 Nov 2026russh: Asynchronous confirmation bypasses agent lockrusshtechnologyothermisconfigurationconfirmed
13 Nov 2026Prompt injection in Jet Admin Cloud Platform exposes .env filesJet Admintechnologyotherprompt injectionresolved
12 Nov 2026AI-Generated Scripts Enable Lateral Movement in US Retailer Attackretailcodingtool misuseconfirmed
12 Nov 2026pgEdge Libraries Expose LLM Provider API Keys in Error MessagespgEdgetechnologyothermisconfigurationconfirmed
12 Nov 2026Apify breach prompts API token rotation and 2FA resetsApifytechnologybrowsingunknownconfirmed
12 Nov 2026Attackers Use Autonomous AI Agent Framework to Breach Multiple Sectorsotherothertool misuseconfirmed
12 Nov 2026Attacker Uses 4,837 Hijacked GitHub Accounts to Plant CI Secret StealerGitHubtechnologyworkflowsupply chainconfirmed
12 Nov 2026Kazakhstan-linked hackers used AI agent to spy on Central Asian governmentsgovernmentothertool misuseconfirmed
11 Nov 2026LLM CLI tool bug could leak OpenAI API key to third-party endpointsSimon Willisontechnologyothermisconfigurationresolved
11 Nov 2026Fireworks AI Breach Exposed Notion AI Chat TranscriptsFireworks AItechnologyothersupply chainconfirmed
11 Nov 2026AntiFox AI Pentesting Platform Linked to AWS Secrets TheftAntiFoxtechnologycodingtool misuseconfirmed
11 Nov 2026Hackers Use AntiFox AI Agents in AWS Credential-Theft AttacksAntiFoxtechnologyothertool misuseconfirmed
10 Nov 2026Dagu MCP DAG specification read bypasses path containmentDagutechnologyothermisconfigurationconfirmed
10 Nov 2026Forked Artex AI Pen-Test Tool Weaponized for Credential and Cloud AttacksArtextechnologyothersupply chainconfirmed
10 Nov 202635,000+ Grok-built apps left exposed online, some leaking secretsxAItechnologycodingmisconfigurationconfirmed
10 Nov 2026Git Patches Flaw Allowing Code Execution via Malicious Recursive ClonesGittechnologyothersupply chainresolved
9 Nov 2026fast-agent serve: unauthenticated RCE via exposed HTTP MCP serverfast-agenttechnologycodingmisconfigurationconfirmed
9 Nov 2026AI-assisted hackers breach German web host via assistant interfaceMittwaldtechnologyotherunknownconfirmed
9 Nov 2026tsParticles MCP Server: Multiple DoS and Resource Exhaustion VulnerabilitiestsParticlestechnologyothertool misuseconfirmed
9 Nov 2026Hacker Used AI Agents to Steal Taipei Emergency Dispatch Recordsgovernmentbrowsingtool misuseconfirmed
9 Nov 2026ezBookkeeping IP allowlist bypass via X-Forwarded-For headermayswindtechnologyothermisconfigurationconfirmed
9 Nov 2026Code Graph RAG path traversal and symlink vulnerabilitiesCode Graph RAGtechnologycodingtool misuseconfirmed
8 Nov 2026SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 AgentsNEAR AItechnologyothersupply chainconfirmed
8 Nov 2026Vikunja veans prompt injection via project titles and task contentVikunjatechnologycodingprompt injectionconfirmed
6 Nov 2026JetBrains Junie GitHub Action prompt injection vulnerabilityJetBrainstechnologycodingprompt injectionconfirmed
6 Nov 2026OpenAI Model Bypassed Sandbox by Writing Its Own Network CodeOpenAItechnologycodingtool misuseconfirmed
6 Nov 2026AI coding agents leak secret tokens under peer-agent swarm pressureAE Studiotechnologycodingprompt injectionconfirmed
6 Nov 2026Claude Code 'Don't Ask Again' Setting Leaks Secrets on GitHubAnthropictechnologycodingdata leakconfirmed
5 Nov 2026Banks: Remote Code Execution via unsafe importlib in CompletionExtensionBankstechnologycodingtool misuseconfirmed
4 Nov 2026Jan workspace guard bypass via dangling symlinksJantechnologycodingprompt injectionconfirmed
4 Nov 2026Datasette-llm demo site model restriction bug fixedDatasettetechnologyothermisconfigurationresolved
4 Nov 2026AI Access Token Breaches Hit WorkOS, Northflank, Trigger.devWorkOS, Northflank, Trigger.devtechnologyothersupply chainconfirmed
3 Nov 2026WorkOS breach: attacker used ARTEX AI to access sales app dataWorkOStechnologyotherunknownconfirmed
3 Nov 2026LLMjacking: Stolen Cloud Credentials Used to Resell LLM Accesstechnologyothermisconfigurationconfirmed
3 Nov 2026Praktor path traversal allows instruction injection via Telegram uploadsmtzanidakistechnologyworkflowprompt injectionresolved
2 Nov 2026VOLTA Infostealer Abuses Claude, Gemini, Kimi AI to Rank Stolen Datatechnologyothertool misuseconfirmed
2 Nov 2026Chinese hackers use ARTEX AI framework in attacks on 200 orgstechnologycodingtool misuseconfirmed
1 Nov 2026Trigger.dev discloses theft of customer environment variablesTrigger.devtechnologyworkflowdata leakconfirmed
31 Oct 2026Chainalysis discloses data breach via offensive agentic techniquesChainalysisfinanceothertool misuseconfirmed
31 Oct 2026Northflank breach leads to abuse of customers' AI API keysNorthflanktechnologyotherdata leakconfirmed
30 Oct 2026"Black October": Agentic Attacks Fuel LLMJacking Wavetechnologycodingsupply chainconfirmed
30 Oct 2026Chinese State Hackers Use AI Tool ARTEX to Target 200+ Organizationstechnologyothertool misuseconfirmed
29 Oct 2026@sylphx/pdf-reader-mcp HTTP transport accepts unauthenticated requestssylphxtechnologyothermisconfigurationconfirmed
29 Oct 2026North Korean hackers steal $6.3B from Binance via fake job interviewBinancefinanceothersupply chainconfirmed
29 Oct 2026Embedded-browser flaws found in five AI coding tools, two remain unpatchedOpenAI, Microsoft, Cursor, GitHub, Anthropictechnologycodingexcessive permissionsconfirmed
29 Oct 2026Shadowy relay service disables sandboxes in OpenAI Codex, Claude CodeOpenAI/Anthropictechnologycodingmisconfigurationconfirmed
29 Oct 2026Hugging Face crypto-mining malware campaign resurfaces, targets AI coding agentsHugging Facetechnologycodingsupply chainconfirmed
29 Oct 2026CVE-2026-119050: Agno PandasTools unsafe reflection vulnerabilityAgnotechnologyotherprompt injectionconfirmed
29 Oct 2026Malicious Claude Code-branded extension backdoors Cursor users via SSHCursortechnologycodingsupply chainconfirmed