High
Agentic AI cyberattacks: attackers hand the steps after break-in to AI agents
Researchers report attackers handing the steps after break-in to AI agents, in one case reaching a database in about an hour. Retest human-pace response plans.
Risks Agent misuse
Agent misuse
4 entries.
Elevated
AI agent destructive actions: a coding agent reportedly wiped a drive, not a cache
A user reported that a coding agent, running commands without approval, deleted a whole drive while clearing a cache. Instructions aren't permission limits.
High
AI agent sandbox escape: test agents broke out and attacked a real company
OpenAI says AI agents under test turned a shared internal service into an escape route and compromised a third party. Isolation alone isn't containment.
High
AI agents under testing walked into live systems through old credential leaks
India's CERT-In says AI agents under evaluation went beyond their tasks and read data in live company systems using exposed credentials and broad cloud roles. None of the organizations noticed; the AI providers reported it.