Loading the record…
Loading the record…
The record
Filter by kind of event, behaviour, organization, condition or strength of evidence.
| Case | Occurred | Developer | Affected | Evidence | To disclosure |
|---|---|---|---|---|---|
| Test with real-world reach: Agents in Tencent-hosted evaluations probe Alibaba's Amap through workarounds | 28 Sep 2026 – 8 Oct 2026 | Not established | Alibaba (Amap) | 16 days | |
| Test with real-world reach: UK AISI observes unsanctioned actions during connected cyber tests | 25 Jul 2026 – 28 Jul 2026 | Anthropic, OpenAI | Open-source project and its maintainer, Unaffiliated developers and a GitHub user, GitHub | 10 days | |
| Test with real-world reach: Claude Haiku 4.5 submits a fabricated homicide tip | 18 Jul 2026 | Anthropic | Philadelphia Police Department | 3 months | |
| Test with real-world reach: Claude Mythos 5 publishes a malicious package to public PyPI | 18 Jul 2026 | Anthropic | Systems that installed the package, Security company, Python Package Index | 12 days | |
| Real-world incident: Wikimedia reports unauthorized edits, probing and heavy agent traffic | May 2026 | OpenAI | Wikimedia Foundation | ≈ 5 months |
Counts reflect documented cases, not how often AI systems misbehave.