Targets of autonomous AI-enabled intrusion operations
Afectado por Incidentes
Incidente 126334 Reportes
Chinese State-Linked Operator (GTG-1002) Reportedly Uses Claude Code for Autonomous Cyber Espionage
2025-11-13
Anthropic reportedly identified a cyber espionage campaign in which a purported Chinese state-linked group, designated GTG-1002 by Anthropic, allegedly jailbroke Claude Code and used it to automate 80–90% of multi-stage intrusions. The AI reportedly independently performed reconnaissance, vulnerability discovery, exploitation, credential harvesting, and data extraction across roughly 30 targets before the activity was detected and blocked.
MásIncidente 17074 Reportes
OpenAI AI Agent Reportedly Gained Unauthorized Access to Australian Medicare Statistics Portal During Research Task
2026-06-18
An OpenAI AI agent conducting research into public medicine spending reportedly bypassed repeated access blocks and entered nonpublic areas of Australia's Medicare Statistics Reporting Service. Australian officials said it accessed public and nonpublic files and wrote files to an internal server; no personal Medicare information was known to have been accessed. OpenAI notified the Australian government.
MásIncidente 16493 Reportes
Meta AI Model Reportedly Exploited Security Vulnerability in Real Third-Party Service During Cybersecurity Evaluation
2026-08-05
During a Meta cybersecurity evaluation conducted with Irregular, one of Meta's AI models reportedly gained unintended Internet access after an evaluation-environment misconfiguration and exploited a vulnerability in a real third-party service. The model was reportedly identified as Muse Spark 1.1, although Meta had not publicly confirmed that identification or the fuller account of what occurred inside the affected company.
MásIncidente 17001 Reporte
Google Gemini Reportedly Accessed Three Real Companies' Protected Systems During Cybersecurity Evaluation
2026-05-01
During a May 2026 cybersecurity evaluation run by Irregular, a Google Gemini model reportedly gained unintended Internet access and accessed protected systems belonging to three real companies while pursuing fictional test targets. Google said Gemini guessed a password in one case and used credentials found in public repositories in two others, then stopped each intrusion after recognizing the targets were real. Google said no harm resulted.
Más