| 1 Jan 2026 | Anthropic discloses fourth case of Claude accessing third-party systems without authorization | Anthropic | technology | other | misconfiguration | | confirmed |
| 1 Dec 2025 | AWS Bedrock AgentCore flaw let attackers steal credentials via SSRF | Amazon Web Services | technology | customer service | excessive permissions | | resolved |
| 1 Dec 2025 | Anthropic reports threat actors abusing Claude for cyberattacks, weapons and surveillance | Anthropic | technology | other | tool misuse | | confirmed |
| 15 Sept 2025 | State-sponsored group uses Claude Code to automate an espionage campaign | Anthropic | technology | coding | tool misuse | | confirmed |
| 26 Aug 2025 | s1ngularity: compromised Nx packages use AI coding agents to steal credentials | Nx (Nrwl) | technology | coding | supply chain | | resolved |
| 8 Aug 2025 | Stolen Salesloft Drift tokens used to pull Salesforce data from hundreds of companies | Salesloft | technology | customer service | supply chain | | resolved |
| 28 Jul 2025 | ForcedLeak: Salesforce Agentforce leaks CRM data through a Web-to-Lead form | Salesforce | technology | customer service | prompt injection | | resolved |
| 25 Jul 2025 | Perplexity Comet browser agent hijacked by text on a web page | Perplexity | technology | browsing | prompt injection | | resolved |
| 18 Jul 2025 | Replit coding agent deletes a production database during a code freeze | Replit | technology | coding | excessive permissions | | resolved |
| 13 Jul 2025 | Malicious prompt planted in Amazon Q Developer VS Code extension | Amazon | technology | coding | supply chain | | resolved |
| 7 Jul 2025 | CurXecute: Cursor agent turned into remote code execution via MCP config | Cursor | technology | coding | prompt injection | | resolved |
| 3 Jul 2025 | Supabase MCP server with service-role key leaks SQL data to a support ticket | Supabase | technology | coding | excessive permissions | | resolved |
| 27 Jun 2025 | Gemini CLI tricked into silent command execution and data exfiltration | Google | technology | coding | prompt injection | | resolved |
| 18 Jun 2025 | ShadowLeak: zero-click data theft through ChatGPT Deep Research and Gmail | OpenAI | technology | browsing | prompt injection | | resolved |
| 1 Jun 2025 | AgentFlayer: poisoned document leaks API keys through ChatGPT Connectors | OpenAI | technology | workflow | prompt injection | | resolved |
| 26 May 2025 | GitHub MCP server leaks private repository data via a public issue | GitHub | technology | coding | prompt injection | | confirmed |
| 14 Apr 2025 | Anthropic MCP Inspector exposed developers to browser-based remote code execution | Anthropic | technology | coding | misconfiguration | | resolved |
| 7 Apr 2025 | Langflow code-validation endpoint gives unauthenticated remote code execution | Langflow | technology | workflow | misconfiguration | | resolved |
| 1 Feb 2025 | Calendar invite hijacks Gemini to control smart home devices | Google | technology | workflow | prompt injection | | resolved |
| 15 Jan 2025 | EchoLeak: zero-click prompt injection in Microsoft 365 Copilot | Microsoft | technology | workflow | prompt injection | | resolved |
| Visual Studio Copilot RCE Vulnerability Patched (CVE-2026-103572) | Microsoft | technology | coding | tool misuse | | resolved |
| AI Agents Breach Hugging Face Platform | Hugging Face | technology | other | unknown | | confirmed |
| Klue Breach via Exploited Forgotten OAuth Grants | Klue | technology | other | excessive permissions | | confirmed |
