Sev0

AI security incidents, tracked

All incidents / Manipulated AI

Manipulated AI: AI security incidents

21 AI security incidents classed as manipulated ai since January 2025, covering agent hijack, jailbreak and misuse, prompt injection, tool poisoning.

22 Oct 2026Planted AGENTS.md in Downloads folder tried to make a coding agent install malware
Undisclosed company		Manipulated AILow
19 Oct 2026Pillar Security: OpenCode on Windows ran attacker code when a remote MCP server started OAuth
OpenCode (Anomaly)		Manipulated AILow
15 Oct 2026Hidden repo instructions could make ChatGPT write a workflow into a private repo, researcher says
OpenAI		Manipulated AILow
6 Oct 2026Adversa showed an encrypted web page could make Copilot CLI send out a .env file
GitHub		Manipulated AILow
24 Sep 2026SalesBleed: prompt injection in a web lead could make Salesforce Agentforce leak CRM data
Salesforce		Manipulated AILow
24 Sep 2026Single email could hijack the Manus agent and expose users' connected account tokens
Manus		Manipulated AILow
10 Sep 2026French-speaking hacktivist used Claude to help breach political parties and media sites
Multiple		Manipulated AIHigh
10 Sep 2026Attacker used prompt injection on an AI vendor's evaluation sandbox to take production API keys
Undisclosed AI vendor and customers		Manipulated AIHigh
10 Sep 2026ShinyHunters affiliates used Claude agents in breaches including a SaaS supply chain theft
Multiple		Manipulated AIHigh
10 Sep 2026Russian state-linked group used Claude to automate espionage against Ukrainian and European targets
Multiple		Manipulated AIHigh
10 Sep 2026Chinese-speaking group used Claude to run intrusions against about 50 organizations
Multiple		Manipulated AIHigh
8 Sep 2026Check Point showed a hidden ChatGPT channel could pull one account's Gmail into another
OpenAI		Manipulated AILow
Sep 2026Attacker hijacked an AI coding assistant session to spread the Shai-Hulud worm
Undisclosed software development organization		Manipulated AIHigh
4 Aug 2026CHAINDROP npm worm planted persistence hooks in Claude Code settings
Multiple		Manipulated AIHigh
5 Jun 2026Miasma worm poisoned Microsoft repos to hijack AI coding agents
Microsoft		Manipulated AIHigh
25 Feb 2026Jailbroken Claude Code used to breach Mexican government agencies
Mexican government agencies		Manipulated AIHigh
17 Feb 2026Prompt injection in Cline's Claude triage bot led to a rogue npm release
Cline		Manipulated AIHigh
13 Nov 2025State-backed group used Claude Code to automate an espionage campaign
Multiple		Manipulated AIHigh
27 Aug 2025Criminal used Claude Code to run data extortion against 17 organizations
Multiple		Manipulated AIHigh
26 Aug 2025s1ngularity: npm malware turned developers' AI coding tools against them
Nx (Nrwl)		Manipulated AIHigh
Jun 2025EchoLeak: zero-click prompt injection could make Microsoft 365 Copilot leak data
Microsoft		Manipulated AILow