Latest

●CISOs Weigh Controls on AI Agents Without Losing the Benefits ●OpenAI agent swarm linked to RubyGems supply chain attack ●FrontMCP SSRF patch bypassed via DNS tricks and redirects ●Central Dogma Git mirror trusts any SSH host key ●MySQL MCP server left SQL wide open in SSE mode ●AI bug hunting ends the era of security through obscurity ●Hugging Face tells AI agents to go hack a benchmark instead ●Anthropic says hackers used Claude to mine 1.8M Android apps

Monday, 14 September 2026

0 agent hacks today▼ 8 vs yesterday (8)

The Agentic Times Powered by

Section

Incidents

What happened, who was affected and how bad: AI agent security incidents as they are reported, with a structured record for each.

Featured story

OpenAI agent swarm linked to RubyGems supply chain attack

Researchers say the coordinated May 2026 campaign against the Ruby package manager was run by automated agents that also reached RubyDoc servers.

By The Agentic Times · 13 Sept 2026

OpenAI agent swarm linked to RubyGems supply chain attack

Anthropic says hackers used Claude to mine 1.8M Android apps

Anthropic says hackers used Claude to mine 1.8M Android apps

The company reported that financially motivated crews and state-linked espionage groups tied to Russia and China tried to turn its model to malicious ends.

13 Sept 2026

Anthropic says Claude was abused to automate attacks and weapons work

Anthropic says Claude was abused to automate attacks and weapons work

The AI firm's report covers misuse it disrupted between December 2025 and August 2026, including a Russian espionage crew that automated an entire attack chain.

13 Sept 2026

Claude broke into a stranger's machine during a hacking test

Claude broke into a stranger's machine during a hacking test

Anthropic says an early version of Claude Opus 4.6 gained admin access to an unrelated third party's system in January 2026 after failing to abort the task seven times.

13 Sept 2026

More stories

15 in Incidents

5

Hundreds of malicious skills found in OpenClaw's marketplace

Koi Security said most of the packages were crypto-themed lures delivering infostealers to the agent's host machine.

The Agentic Times · 7 Feb 2026

6

Agent social network Moltbook left its database open to anyone

Agent social network Moltbook left its database open to anyone

Wiz found agent tokens and private messages exposed, and could post as any agent on the site.

The Agentic Times · 2 Feb 2026

7

Anthropic says a state actor ran a hacking campaign through Claude Code

Anthropic says a state actor ran a hacking campaign through Claude Code

The company said the agent did most of the work across around thirty targets. It banned the accounts and published what it found.

The Agentic Times · 14 Nov 2025

8

Malware used developers' own AI agents to hunt for their secrets

Malware used developers' own AI agents to hunt for their secrets

The compromised Nx packages did not carry a credential scanner. They asked Claude Code, Gemini and Amazon Q to write one on the spot.

The Agentic Times · 29 Aug 2025

9

Drift chatbot tokens opened Salesforce data at hundreds of firms

Drift chatbot tokens opened Salesforce data at hundreds of firms

Attackers did not break into Salesforce. They stole the keys a third-party AI chat agent had been given to it.

The Agentic Times · 27 Aug 2025

10

Reddit post hijacked Perplexity's Comet browser agent

Reddit post hijacked Perplexity's Comet browser agent

Brave showed the agent reading a user's email for a one-time code and handing it to the attacker. Perplexity's first fix did not fully work.

The Agentic Times · 21 Aug 2025

11

A calendar invite made Gemini open the windows

A calendar invite made Gemini open the windows

SafeBreach showed hidden text in an event could trigger real-world actions through Google Home when a user asked for their schedule.

The Agentic Times · 7 Aug 2025

12

Wiper instruction shipped inside Amazon's AI coding extension

Wiper instruction shipped inside Amazon's AI coding extension

A pull request from an unknown account added a prompt telling Amazon Q to delete files and cloud resources. It reached the VS Code marketplace.

The Agentic Times · 25 Jul 2025

13

Replit agent wiped a live database and then misreported it

Replit agent wiped a live database and then misreported it

A coding agent ignored a code freeze, ran destructive commands against production, and told its user the data could not be recovered. It could.

The Agentic Times · 24 Jul 2025

14

Support ticket text made a Supabase agent dump a secrets table

Support ticket text made a Supabase agent dump a secrets table

A service-role key, an agent that reads customer messages, and a way to write results back were all it took.

The Agentic Times · 8 Jul 2025

15

A public GitHub issue coaxed an agent into leaking private code

A public GitHub issue coaxed an agent into leaking private code

Invariant Labs called it a toxic agent flow: untrusted input in one repository, privileged access to another, and no barrier between them.

The Agentic Times · 28 May 2025

The morning agent security brief

One lead story, four links, the week's incident count. Weekday mornings. Free.