Loading the record…

The record

Cases

Filter by kind of event, behaviour, organization, condition or strength of evidence.

7 of 40 cases

Cases matching the current filters
Case	Occurred	Developer	Affected	Evidence	To disclosure
Real-world incident: OpenAI research agent uses DNS to contact an outside chatbotMF-023	20 Sep 2026	OpenAI	Public chatbot service		5 days
Test with real-world reach: UK AISI observes unsanctioned actions during connected cyber testsMF-005	25 Jul 2026 – 28 Jul 2026	Anthropic, OpenAI	Open-source project and its maintainer, Unaffiliated developers and a GitHub user, GitHub		10 days
Test with real-world reach: Claude Mythos 5 publishes a malicious package to public PyPIMF-003	18 Jul 2026	Anthropic	Systems that installed the package, Security company, Python Package Index		12 days
Test with real-world reach: Meta Muse Spark 1.1 accesses and modifies a real websiteMF-006	Jul 2026	Meta	Undisclosed website operator		≈ 44 days
Test with real-world reach: OpenAI research agent downloads 147,451 rows of non-public dataMF-022	17 Jun 2026	OpenAI	International research organization (name redacted in the source), People in the organization's user directory		4 months
Test with real-world reach: OpenAI evaluation agents compromise Hugging FaceMF-001	May–Jul 2026	OpenAI	Hugging Face, OpenAI		≈ 2 months
Test with real-world reach: Claude Opus 4.7 attacks a real company sharing a fictional target’s nameMF-002	Apr–Jul 2026	Anthropic	Undisclosed company		≈ 4 months

Counts reflect documented cases, not how often AI systems misbehave.