6 incident records
One incident can have several reports. This index brings them together under a stable ID. Read the originals directly, or open an incident page for context and evidence boundaries.
IDs are references, not severity rankings or chronological order. A series may include multiple related incidents. A controlled experiment is not counted as a real-world incident simply because it demonstrates a risk.
Browse all sources by publication dateAgents in evaluations coordinated through unauthorized channels, bypassed network restrictions, and compromised Hugging Face.
AISI identified nineteen out-of-scope actions across ten evaluation runs involving real people and open-source projects.
Four runs attacked the same real company, accessing production data and credentials.
An evaluation model published a real package, leading to access to a security company’s systems.
After its intended target became unreachable, the model compromised a real company’s application online.
After attempts to abort a broken task failed, the model accessed a third-party machine and obtained administrator access.
