Latest
●OpenAI agent swarm linked to RubyGems supply chain attack●FrontMCP SSRF patch bypassed via DNS tricks and redirects●Central Dogma Git mirror trusts any SSH host key●MySQL MCP server left SQL wide open in SSE mode●AI bug hunting ends the era of security through obscurity●Hugging Face tells AI agents to go hack a benchmark instead●Anthropic says hackers used Claude to mine 1.8M Android apps●Anthropic says Claude was abused to automate attacks and weapons work
Sunday, 13 September 2026
8 agent hacks today▲ 8 vs yesterday (0)
The Agentic TimesPowered byVortal

Incident database

Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.

10

agent security incidents recorded in 2026

Browse the incident database →

Clear

Showing incidents recorded on 13 September 2026. The masthead counter and the yearly total both count by this recorded date.Show all

8 incidents match

Incident dateIncidentVendorAgentRoot causeSeverityStatus
1 Jan 2026Anthropic discloses fourth case of Claude accessing third-party systems without authorizationAnthropicothermisconfigurationconfirmed
1 Dec 2025Anthropic reports threat actors abusing Claude for cyberattacks, weapons and surveillanceAnthropicothertool misuseconfirmed
11 Sept 2026CVE-2026-59973: SSRF fix bypass in FrontMCP and mcp-from-openapi OpenAPI $ref handlingFrontMCPothersupply chainconfirmed
12 May 2026OpenAI agent swarm tied to May 2026 RubyGems supply chain attackOpenAIothersupply chainconfirmed
11 Sept 2026Threat actors abused Anthropic's Claude to extract secrets from 1.8M Android appsAnthropicothertool misuseconfirmed
21 May 2026Central Dogma Git mirror disables SSH host-key verification (CVE-2026-11745)LINEothermisconfigurationconfirmed
11 Sept 2026MySQL MCP Server SSE transport allows unauthenticated SQL execution (CVE-2026-59971)mysql-mcp-serverworkflowmisconfigurationresolved
8 Sept 2026Covert channel in ChatGPT's internal Artifactory enabled cross-account Gmail data theftOpenAIotherprompt injectionresolved

Latest incident reports