The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure

Tenable links seven agentic AI attack incidents to three threat actors, including Taiwan's confirmed autonomous attack that exfiltrated over 2,564 personnel records.

Tenable's Research Special Operations team has tracked a cluster of seven agentic AI threat incidents since late July 2026, attributing the activity to three actors. Taiwan's Ministry of Digital Affairs confirmed a near-autonomous AI cyber attack in July 2026 in which autonomous agents mapped 21 connected government systems, compromised 85 accounts, and exfiltrated more than 2,564 personnel records in approximately four days. The cluster also includes the JADEPUFFER campaign.

• Seven agentic AI incidents tracked since late July 2026, attributed to three actors
• Taiwan autonomous attack mapped 21 government systems and compromised 85 accounts
• Over 2,564 personnel records exfiltrated in roughly four days
• Near-autonomous offensive AI has moved from theoretical risk to operational reality