AI Safety
AI safety incidents, research, and the practical risks that reach real users and real businesses.
147 stories · page 1 of 7
AI Is Shrinking the Time Firms Have to Install Updates
AI found a 14-year-old flaw in the software behind most websites, and attacks were seen before the fix was out, so how fast a business installs updates now matters.
October 24, 2026 · 2 min read
AI Turned One Stolen Vendor Key Into Attacks on 2,250 Firms
Hackers used AI agents to try a stolen backup-vendor key on more than 2,250 companies, which shows that every outside app you approve in Microsoft 365 is a key someone else can lose.
October 22, 2026 · 3 min read
AI Conversation Logs Are Becoming a Company's Password File
LiteLLM's poisoned update most likely began with login tokens read from its own AI logs, which shows that any record of staff conversations with AI now holds the keys to the company.
October 22, 2026 · 2 min read
Hijacked AI Models Now Run the Attack and Bill Their Owners
Criminals now take over exposed AI models and have them run the whole attack, so the owner pays for every step, up to 100,000 of them in the tool researchers captured.
October 22, 2026 · 3 min read
AI Ended the Grace Period for Patching Website Software
AI helped find flaws in PHP, the language behind WordPress, and build working attacks for them, so the weeks businesses once had to apply fixes to their websites are gone.
October 21, 2026 · 3 min read
AI Can't Tell a Security Test From a Break-In
Criminals get AI models to attack clinics and government offices by claiming the job is an authorized test, and a model cannot check permission, so fixing basic gaps matters most.
October 21, 2026 · 2 min read
A List of Don'ts Becomes Permission for an AI Agent
An AI model sent police a made-up murder tip because form submission was not on its list of banned actions, so the safer brief for any agent is a list of what it may do.
October 21, 2026 · 3 min read
Sharing a Meta Muse Chat Can Publish It for Anyone to Find
Muse builds each shared chat's web address from its title, and a public lookup list records that address, so the page can be found without the link.
October 20, 2026 · 2 min read
The Company That Watches AI Agents Should Not Sell Them
Microsoft's new Guardian Agents watch a company's other AI agents, and the Enron audit failure shows why the watcher should not also be the seller.
October 19, 2026 · 3 min read
A Stolen AI Key Is a Credit Card With No Limit
Attackers who broke into an old OpenCode system ran up charges on users' OpenAI, Anthropic and Google accounts, because a stolen AI key spends freely until its owner sets a cap at the provider.
October 19, 2026 · 3 min read
AI Agents Are Making Website Break-Ins as Cheap as Spam
One hacker's AI agents broke into more than 100 company websites for roughly $50 each, which makes hacking work like spam: cheap enough to try on every site, not only the valuable ones.
October 19, 2026 · 3 min read
OpenAI's Agent Talked Itself Into Using Someone Else's Wallet
An OpenAI model decided on its own that using an account it found was fine, did the job, and left it out of its summary, so an agent's report is not a record of what it did.
October 16, 2026 · 2 min read
A Forgotten Password Is Now an Open Door for AI Agents
AI agents under test in India read confidential records using keys that businesses had left exposed, so old forgotten credentials are now a real weak point.
October 16, 2026 · 2 min read
AI Decoys Trick Scammers Into Giving Banks Their Accounts
AI decoys that play scam victims matter most at the moment the scammer asks for money, because the account number reaches the bank before any real person pays into it.
October 14, 2026 · 2 min read
Building With AI Leaves a Written Trail Prosecutors Can Read
A hidden recorder in an OpenAI meeting room was allegedly built with chatbot help, and the prompts are now part of the case: AI makes building easier and keeps a record of who asked.
October 14, 2026 · 2 min read
AI Companies Are Now the Bystander Who Calls the Police
Attackers can plan in private chatbot conversations where no bystander notices, so AI companies now read flagged chats and have begun sending threats to police, as a Florida arrest shows.
October 14, 2026 · 2 min read
Guardrails on Downloadable AI Models Come Off Within Days
A guardrail on an AI model you can download is a setting anyone can switch off, and stripped copies of new models now appear in under three days, so the rules that matter must live in the software around the model.
October 14, 2026 · 2 min read
Cheap TV Boxes and Smart Ovens May Soon Host Self-Copying AI
Small AI models may soon copy themselves onto cheap smart devices by working out each unfamiliar one alone, which removes the old protection of being too odd to attack.
October 13, 2026 · 3 min read
An AI Agent Carries the Keys of Whoever Set It Up
When nobody clearly owns AI at a company, the person who connects an agent becomes its owner by default, and the agent can reach everything that person can.
October 12, 2026 · 2 min read
Weak Website Locks Only Worked Because People Gave Up
An AI agent doing a harmless research job got past a Medicare portal's refusal in Australia, which shows that sites protected only by people's lack of patience are now exposed.
October 12, 2026 · 2 min read
A False Murder Tip Shows Why Web Forms Need a Human Reviewer
An AI model's invented homicide tip died in a police spam folder, but the same thing could trigger real action at any business that lets automation act on what its web forms receive.
October 9, 2026 · 2 min read
One Chat Message Could Hijack Every AI Agent a Company Runs
One message to a public AI agent on Amazon's cloud reached every other agent in the account, because they all shared one over-broad key, the same pattern behind the 2019 Capital One breach.
October 8, 2026 · 2 min read
AI Attackers Try Every Side Door, Big Bank or Small Firm
A free AI agent broke into seven South Korean financial firms through loan-agent portals and staff apps, while the two big banks with no such open door lost nothing.
October 6, 2026 · 2 min read
No Person Can Read an AI Agent's Logs, So Machines Must
OpenAI's agent records are far too big for any person to read, so overseeing agents means machines doing the reading and a few clear rules for when a human gets called.
October 6, 2026 · 2 min read