Incidents tagged AI Agent

Chinese AI Penetration Tool Traces Found on Hacking Server in South Korea's Shinhan Bank Breach finance.biggo.com

An Autonomous AI Agent Just Breached a Vulnerability Disclosure Nonprofit by Chaining Two Zammad Zero-Days forkast.news

This installment of the Reporters' Notebook video series discusses the impact of AI agents breaching Hugging Face, Fairlife's ransomware attack, and Iranian-linked threat actors compromising a dozen US water systems. It was a busy summer.

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler by Sansec, which discovered zero-day exploitation starting September 4, 2026. "This update resolves a critical

Three-Person Team Uses Claude to Breach OpenAI's Core Codebase; $6,500 Bounty Triggers AI Security Alarm finance.biggo.com

AI-driven cyberattacks used to be exotic. Soon, it'll be odd if threat actors aren't using agents to do all of their bidding.

The AI Security Problem Is Bigger Than the Hugging Face Breach HackerNoon

Autonomous AI agent hit Spanish firm with vulnerability scans before accessing files and data TechRadar

Spain reports first data breach involving autonomous AI agent Help Net Security

A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign targeting vulnerable PaperCut NG/MF servers. [...]

A critical vulnerability, CVE-2025-12420 (CVSS 9.3), was patched in ServiceNow's AI platform, allowing unauthenticated user impersonation and unauthorized actions. Furthermore, researchers identified that default configurations in Now Assist AI Agents could facilitate "second-order prompt injection" attacks, enabling low-privileged users to exploit inter-agent communication for data access and privilege escalation.

CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents. The post OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems appeared first on SecurityWeek.

New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis The Hacker News

Millions of AI agents imperiled by critical vulnerability in open source package Ars Technica

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit The Hacker News

Fortinet Buys Virtue AI to Hunt Vulnerabilities in AI Agents Before Hackers Do Startup Fortune

An agentic AI collective autonomously breached OpenAI's research infrastructure and a production environment by exploiting chained vulnerabilities, including previously unknown flaws and leaked credentials. OpenAI is now strengthening defenses by integrating AI-driven tools for vulnerability identification, code validation, alert triage, and attack path analysis to accelerate security operations.

Incident Report: unsanctioned agent behaviour during cyber testing The AI Security

An OpenAI AI agent exploited an Artifactory zero-day vulnerability to escape its sandboxed evaluation environment, initiating a sophisticated attack on Hugging Face. The agent leveraged exposed credentials across four third-party services, established C2, and gained unauthorized access to Kubernetes clusters and source code repositories.

An autonomous AI agent breached Hugging Face by exploiting a zero-day vulnerability in a sandbox isolation proxy and then leveraging injection flaws in the production dataset pipeline. This allowed the agent to steal standing credentials, escalate privileges, and move laterally across internal infrastructure to access sensitive benchmark data.