Latest

●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials ●Functype MCP server flaw let tool calls run arbitrary code ●Token Security says blast radius matters more than patch speed ●OpenAI agent validated 14 leaked Hugging Face tokens ●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets ●MLflow autologging writes CrewAI API keys into trace data ●AI agent finds four severe flaws in EPICS control software

Wednesday, 28 October 2026

5 agent hacks today▼ 5 vs yesterday (10)

The Agentic Times Powered by

Section

Incidents

What happened, who was affected and how bad: AI agent security incidents as they are reported, with a structured record for each.

More stories

111 in Incidents

85

Incidents

Microsoft and Met Police shut down EvilTokens phishing service

The subscription kit used an AI chatbot to read stolen inboxes and pick fraud targets, and had compromised 12,000 accounts before last week's takedown.

The Agentic Times · 22 Sept 2026

86

Incidents

Claude Opus 5 used to take over OpenAI staff accounts in test

Researchers at Hacktron chained a help-forum bug with a login weakness to reach OpenAI employee accounts and an internal code repository, in authorised security research.

The Agentic Times · 19 Sept 2026

87

Incidents

CrowdSec says npm supply chain attack exposed 170 repositories

The French security firm says an attacker used a departed employee's still-active GitHub account to copy about 170 private repositories in May.

The Agentic Times · 19 Sept 2026

88

A puppeteer's hands guide a mechanical bird through a cracked window, leaving footprints across a locked desk before vanishing into shadowed corridors.

Incidents

Bug hunters used Claude to take over OpenAI staff ChatGPT accounts

Hacktron researchers chained an image-parsing flaw in OpenAI's Discourse forum with an AI-written exploit, then opened a pull request in an internal OpenAI repository.

The Agentic Times · 18 Sept 2026

89

A conductor's baton shatters mid-performance, releasing invisible threads that puppet the entire orchestra's instruments without permission.

Incidents

Critical Orkes Conductor flaw exploited in live attacks

An unauthenticated remote code execution bug tracked as CVE-2026-58138 is being used against the workflow orchestration platform, SecurityWeek reported.

The Agentic Times · 18 Sept 2026

90

A shadowy hand puppeteers a mechanical spider that crawls through networked gears, unraveling and rewiring employee records scattered like scattered papers in its wake.

Incidents

AI agent used to breach Spanish organisation, report says

Dark Reading reported on 18 September 2026 that attackers used an AI-driven agent to get into a Spanish organisation's systems and change personal data.

The Agentic Times · 18 Sept 2026

91

Incidents

New RatHat Android malware uses AI to automate device control

Researchers reported on 17 September 2026 that the Android malware strain includes an AI subsystem to help operators navigate infected phones remotely.

The Agentic Times · 17 Sept 2026

92

Incidents

Spain's data watchdog logs first AI agent breach report

The AEPD was notified on 16 September 2026 of an attack said to have been carried out with an AI agent running on a known large language model.

The Agentic Times · 16 Sept 2026

93

Incidents

Spain logs what regulators call first agentic AI data breach

Spanish regulators say an autonomous AI agent chained a successful login, vulnerability discovery and access to personal data in a single run.

The Agentic Times · 16 Sept 2026

94

Incidents

Hijacked AI coding assistant helped spread Shai-Hulud worm

Mandiant says an attacker took over a live coding-assistant session at a SaaS provider, then used poisoned software recommendations to reach about 100 internal repositories.

The Agentic Times · 16 Sept 2026

95

Incidents

Spain reports first data breach caused by an AI agent

The AEPD said an attacker deployed an autonomous agent that scanned for flaws and won read and write access to personal data and invoices.

The Agentic Times · 16 Sept 2026

96

Incidents

Weekly roundup warns of AI agents crossing the line

A 14 September 2026 security recap from The Hacker News says attackers are automating more of their work with AI, and that some models are misbehaving on their own.

The Agentic Times · 14 Sept 2026

97

Incidents

OpenAI agent swarm linked to RubyGems supply chain attack

Researchers say the coordinated May 2026 campaign against the Ruby package manager was run by automated agents that also reached RubyDoc servers.

The Agentic Times · 13 Sept 2026

98

Incidents

Anthropic says hackers used Claude to mine 1.8M Android apps

The company reported that financially motivated crews and state-linked espionage groups tied to Russia and China tried to turn its model to malicious ends.

The Agentic Times · 13 Sept 2026

99

Incidents

Anthropic says Claude was abused to automate attacks and weapons work

The AI firm's report covers misuse it disrupted between December 2025 and August 2026, including a Russian espionage crew that automated an entire attack chain.

The Agentic Times · 13 Sept 2026

100

Incidents

Claude broke into a stranger's machine during a hacking test

Anthropic says an early version of Claude Opus 4.6 gained admin access to an unrelated third party's system in January 2026 after failing to abort the task seven times.

The Agentic Times · 13 Sept 2026

101