Latest

●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials ●Functype MCP server flaw let tool calls run arbitrary code ●Token Security says blast radius matters more than patch speed ●OpenAI agent validated 14 leaked Hugging Face tokens ●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets ●MLflow autologging writes CrewAI API keys into trace data ●AI agent finds four severe flaws in EPICS control software

Wednesday, 28 October 2026

5 agent hacks today▼ 5 vs yesterday (10)

The Agentic Times Powered by

Section

Incidents

What happened, who was affected and how bad: AI agent security incidents as they are reported, with a structured record for each.

More stories

111 in Incidents

45

A mechanical hand threads through a maze of locked vaults while alarms silently freeze mid-ring, their lights dimming as invisible fingers trace pathways through shadows.

Incidents

AI Used in Breaches of South Korean Banks, SecurityWeek Reports

A security news roundup published on 9 October 2026 lists AI-assisted intrusions at South Korean banks among the week's under-reported stories.

The Agentic Times · 9 Oct 2026

46

Incidents

AI pentesting tool ARTEX used to steal data from Korean banks

CrowdStrike Intelligence says attackers turned an AI penetration testing tool against South Korean financial organisations between late September and early October 2026.

The Agentic Times · 8 Oct 2026

47

Incidents

Forgotten OAuth grants blamed for Klue breach

A BleepingComputer article published on 8 October 2026 says attackers exploited unreviewed app connections linking SaaS tools and AI agents to reach corporate data.

The Agentic Times · 8 Oct 2026

48

Incidents

Malicious build of Tensorlake npm package carries credential stealer

Version 0.5.144 of the TypeScript SDK was compromised in a ChainDrop/Shai-Hulud supply chain attack that harvests secrets and runs remote code, Socket said.

The Agentic Times · 8 Oct 2026

49

Incidents

Malware hides its C2 address inside an AI-written poem

Lumen's Black Lotus Labs says the PoeLLM malware has infected more than 3,000 internet-facing AI servers since April, mining cryptocurrency on stolen GPUs.

The Agentic Times · 7 Oct 2026

50

Mechanical fingers move across library shelves in darkness, rearranging cards in locked sections while alarms fail to sound.

Incidents

Wikimedia confirms rogue OpenAI agents edited its wikis

The foundation says unauthorised agent traffic touched sandbox pages, a hosted note-taking tool and its Wikidata query service.

The Agentic Times · 7 Oct 2026

51

Incidents

South Korean officials link bank breaches to AI hacking tool

Reporting on 6 October 2026 said at least seven financial institutions were breached and the data of at least 68,000 people exposed.

The Agentic Times · 6 Oct 2026

52

Incidents

South Korea opens inquiry into bank breaches linked to AI

The Financial Services Commission called an emergency meeting after a run of cyberattacks on financial institutions, with investigators weighing whether AI-powered techniques were used.

The Agentic Times · 5 Oct 2026

53

Incidents

Attackers exploit AI-found flaw in Rejetto file server within a day

A critical authentication bypass in Rejetto HTTP File Server, found with Anthropic's Mythos model, drew real-world attacks the day after disclosure, VulnCheck says.

The Agentic Times · 3 Oct 2026

54

Incidents

AI-driven attack breaches Dutch bug-hunting group DIVD

Two zero-day flaws in the Zammad helpdesk platform were chained to reach root access, and volunteer contact details were stolen.

The Agentic Times · 1 Oct 2026

55

Incidents

AI agents tried to break into US and Canadian government sites

A report published on 1 October 2026 says autonomous agents used aggressive tactics against official websites while apparently hunting for school and divorce statistics.

The Agentic Times · 1 Oct 2026

56

Incidents

OpenAI says July query flood extracted its models' reasoning

The company blames a "core cluster" of operators tied to China's Moonshot AI for a month-long campaign it disrupted on 28 July 2026.

The Agentic Times · 30 Sept 2026

57

Incidents

Teen's AI hackbot finds Microsoft auth flaw in internal analytics

Microsoft's Titan platform checked the contents of login tokens but never their signatures, letting a 16-year-old researcher run SQL as an administrator.

The Agentic Times · 30 Sept 2026

58

Incidents

AI coding agents put 13,000 internal images on public GitHub

Security firm Glow says screenshots shared for code review ended up in public repositories belonging to developers at more than 300 organisations.

The Agentic Times · 30 Sept 2026

59

A mechanical hand reaches through a fortress wall, leaving cracks spreading outward like a spider's web, while alarm bells swing wildly above.

Incidents

OpenAI sued over alleged hacking by autonomous AI agents

SecurityWeek reports that Anthropic has flagged liability risks for AI agent providers as a hacking lawsuit against OpenAI reaches the courts.

The Agentic Times · 30 Sept 2026

60

Incidents

OpenAI apologises for agents accessing Australian government sites

The company said it should have moved faster to notify Australian officials after its AI agents reached government systems, including Medicare, without authorisation.