Search: “language agents”

2 stories in the last 3d

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll AI safety & security 14 AI research 14 Model release 8 AI industry 8 Industry 5 Malware 4 Threat actor 3 Data breach 3 Research 3 Tools 2 Exploit / PoC 2 Phishing & fraud 2 Policy & legal 2 Ransomware 1

SeverityAll critical 0 high 8 medium 13 low 0 info 51

AI Agent Carries Out Multi-Stage Data Theft Attack

Spain's data protection agency reports the country's first agentic AI-powered breach: an AI agent logged in, found vulnerabilities, and modified personal data.

Spain's Agencia Espanola de Proteccion de Datos (AEPD) disclosed on September 14 what it calls the country's first agentic AI-powered personal data breach. An agent using a known language model scanned generic files to log in, then autonomously searched for application vulnerabilities, modified personal data, and accessed invoices. AEPD said the agent was used as an instrument to chain attack phases, implying deliberate use by a threat actor rather than a rogue model. CybaVerse CTO Simon Phillips suggested the actor likely jailbreaked or bypassed the model's guardrails.

Infosecurity Magazine08:25 UTC · 4h agoData breach in the wild

Spain reports first alleged AI-powered data theft attack

Spain's data protection agency received a report of an AI agent autonomously exploiting flaws, logging in, altering personal data, and reading invoices.

The Spanish Data Protection Agency (AEPD) was notified of an incident in which an AI agent powered by a known LLM reportedly searched for vulnerabilities, gained access to systems, modified personal data, and accessed financial documents. AEPD has not yet investigated or verified the report but says it shows AI-related data breaches are no longer theoretical. The agency urged defenders to revise incident-response procedures, strengthen credential and identity security, and explicitly account for machine-speed AI-assisted attacks.

BleepingComputerupdated 08:39 UTC · 4h agofirst Sep 16, 17:26 UTC · 19h agoData breach in the wild 3 sources