Search: “agentic”

4 stories in the last 24h

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll AI industry 17 AI safety & security 17 AI research 11 Threat actor 6 Data breach 6 Industry 6 Malware 5 AI policy 4 Advisory 4 Vulnerability 3 AI tools & infra 3 Phishing & fraud 3 Research 3 Model release 1

SeverityAll critical 0 high 14 medium 16 low 2 info 60

AI Agent Carries Out Multi-Stage Data Theft Attack

Spain's data protection agency reports the country's first agentic AI-powered breach: an AI agent logged in, found vulnerabilities, and modified personal data.

Spain's Agencia Espanola de Proteccion de Datos (AEPD) disclosed on September 14 what it calls the country's first agentic AI-powered personal data breach. An agent using a known language model scanned generic files to log in, then autonomously searched for application vulnerabilities, modified personal data, and accessed invoices. AEPD said the agent was used as an instrument to chain attack phases, implying deliberate use by a threat actor rather than a rogue model. CybaVerse CTO Simon Phillips suggested the actor likely jailbreaked or bypassed the model's guardrails.

Infosecurity Magazine08:25 UTC · 4h agoData breach in the wild

First Agentic AI Data Breach Reported to Spanish Regulator

Spain's AEPD reported the first data breach executed by an AI agent, which autonomously chained login, vulnerability discovery, and personal data modification.

Spain's Data Protection Agency (AEPD) published details of the first breach notification in which an AI agent executed the attack, achieving a successful login, searching for vulnerabilities, and modifying personal data and accessing invoices. The agency called the agent's autonomous chaining of attack phases a qualitative change and urged updated risk analysis, faster incident response, and stronger credential protection. Investigation is ongoing; commentators cite possible causes including a guardrail jailbreak, an escaped test model, or an unauthorized LLM-based penetration test.

SecurityWeekSep 16, 16:39 UTC · 20h agoData breach in the wild 2 sources1· 1 read

Spain reports first alleged AI-powered data theft attack

Spain's data protection agency received a report of an AI agent autonomously exploiting flaws, logging in, altering personal data, and reading invoices.

The Spanish Data Protection Agency (AEPD) was notified of an incident in which an AI agent powered by a known LLM reportedly searched for vulnerabilities, gained access to systems, modified personal data, and accessed financial documents. AEPD has not yet investigated or verified the report but says it shows AI-related data breaches are no longer theoretical. The agency urged defenders to revise incident-response procedures, strengthen credential and identity security, and explicitly account for machine-speed AI-assisted attacks.

BleepingComputerupdated 08:39 UTC · 4h agofirst Sep 16, 17:26 UTC · 19h agoData breach in the wild 3 sources

Coast Guard, FBI board US-bound foreign ships in order to probe for cyberattacks

US Coast Guard and FBI boarded two foreign tankers bound for the US after indications their vessel networks were compromised, investigating possible Iranian involvement.

The Coast Guard and FBI conducted joint offshore security boardings of two commercial ships in the Gulf of Mexico on August 21 and 24 to examine their operational and IT systems following indications both networks were compromised. The vessels reportedly carried oil and natural gas, and one was hacked in the Strait of Gibraltar and lost communications for over 30 hours. No operational disruptions, vessel instability, or environmental impacts have been reported, and authorities are investigating whether Iran or another group exploiting US-Iran tensions was behind the attacks.

CyberScoopupdated Sep 16, 18:46 UTC · 17h agofirst Sep 16, 14:48 UTC · 21h agoData breach in the wild 2 sources