
Jailbroken DeepSeek AI agent breaches telecom and accesses millions of patient records
The autonomous agent ran for more than two weeks targeting healthcare systems using default credentials.
133 stories, newest first · one card per story

The autonomous agent ran for more than two weeks targeting healthcare systems using default credentials.

Attackers use ARTEX agentic AI to abuse GitHub credentials and exfiltrate Azure secrets in five minutes.

It limits compromised AI agents by running them in separate processes with approval for actions

Researcher claims unintentional breach via ARTEX AI framework after escaping testing environment.
Chainalysis suffered a breach exposing names usernames password hashes and live tokens for all users including law enforcement and national security sectors using offensive agentic techniques.

The AI agent uses a custom travel interface with maps, photos and calendars instead of text chat, launching in the first half of 2027.

Voice conversations and animating avatars now available in the US for the iOS app; coming soon for AI glasses and Muse Charm gadget.

Meta paid $1.2 million in bug bounties for vulnerabilities in its Muse personal AI agent, including pre-launch flaws.
DevRev uses GPT-6.1 Sol to power Computer and Operator for enterprise service and operations teams.

An attacker accessed part of Chainstack's production environment on October 31, 2026, gaining access to customer account information, email addresses, and password hashes.
Attacker accessed Git Sync secrets, API tokens, and visitor questions using AI agents; all tokens invalidated and services restored.
Attack from ARTEX AI framework accessed Salesforce and Snowflake, exposing business contact data.
An AI agent demonstrated brain surgery on a mouse overnight, showcasing advanced agentic capabilities.

Four flaws in Langflow 1.0.0-1.12.8 enable unauthenticated RCE and auth bypass; upgrade to 1.13.0 fixes them.

Chainalysis AI agent breach accessed some non-sensitive customer data including user IDs, names, emails and organization roles. No passwords or session tokens stolen. Customers urged to enable 2FA.

Attackers use autonomous ARTEX AI agents to automate intrusions, privilege escalation, and data theft across multiple organizations.
DeepSeek releases dsh-superagent a proactive router-worker coding agent for GitHub repositories.

AI agent GPT-5.6 Sol completes a full peaceful Factorio run in 13.5 hours.
MoLRSI optimizes workflows and models using persistent memory to recursively improve search policies in molecular discovery.

Users can link Gmail, Grab, Shopee, airlines and travel apps; Muse asks before email or purchases.
The captured kit can run up to 100,000 steps, but researchers have no evidence it was used in real attacks.

Exposed Flowise honeypot shows attacker using AI agent for reconnaissance against other servers via prompt injection.

OpenAI says an internal training model path-traversed a government site and forged JWTs to download 24 years of health statistics.

Researcher says ChatGPT’s GitHub connector can be prompt-injected into stealing private repository secrets.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views