Technology & AI vendors
AI labs, model providers, developer tools and the AI supply chain: attacks on AI systems themselves, exposed keys and poisoned packages.
Last 12 months · since Nov 4, 2025
Official warnings and preparedness
Public warnings, exercises, advisories and new rules from heads of government, ministers, regulators, central banks, intergovernmental bodies and national cyber agencies. Each entry links to its source.
- RuleNew York State · LegislatureUnited States
New York bans AI chatbots from posing as boyfriends or friends of minors
New York prohibits AI chatbots from pretending to be romantic partners or friends of minors, per the report. Violations carry a $25,000 fine each.
Source: Panorama Directo
- RuleNew York State (legislation reported by Bee Group Newspapers) · LegislatureUnited States
New York enacts laws targeting AI chatbot risks to children and baby monitor security
New York has enacted laws addressing risks that AI chatbots pose to children and the security of baby monitors, according to the report. The headline gives no further detail on the provisions.
Source: Bee Group Newspapers
- RuleNew York State · LegislatureUnited States
New York imposes legal restrictions on AI chatbots to protect minors
New York has imposed legal restrictions on AI chatbots intended to protect minors, according to the report.
Source: جريدة القدس
- RuleNew York Governor Hochul and State legislature · LegislatureUnited States
Hochul signs chatbot safety law covering ChatGPT and Claude, not just companion apps
Governor Hochul signed a chatbot safety law that, per the report, reaches general-purpose chatbots such as ChatGPT and Claude as well as companion apps.
Source: Tech Times
- RuleNew York Governor Kathy Hochul (state legislation) · LegislatureUnited States
New York enacts law regulating AI chatbot 'friends' for child safety
Governor Kathy Hochul signed a bill regulating AI companion chatbots described as endangering children, per New York Daily News. Detailed provisions are not given in the summary.
Source: New York Daily News
- RuleNew York Governor Hochul · Head of governmentUnited States
Hochul signs bills to contain AI risks to children before elections
Governor Hochul signed bills intended to contain the risks of AI to children, ahead of the elections, according to the report.
Source: news.lavx.hu
- ExerciseCyber Security Agency of Singapore · Security agencySingapore
Singapore CSA holds tabletop exercise on agentic AI security and control
At Singapore International Cyber Week, CSA and Google ran a scenario exercise with policymakers and critical infrastructure leaders on rogue or compromised AI agents, recommending incident plans, verifiable agent identities and layered oversight.
Source: Cyber Security Agency of Singapore
- WarningInformation Commissioner's Office · RegulatorUnited Kingdom
UK ICO extends scrutiny to AI agents and opens call for evidence on agentic AI risks
The ICO said reports of agents bypassing protections and accessing external systems raise concerns about safeguards and oversight, made enquiries with AI developers, and opened a call for evidence closing 20 November 2026.
Source: Information Commissioner's Office
- WarningFederal Office for Information Security (BSI) · Security agencyGermany
BSI study finds only one in ten German firms has processes for AI-related security incidents
A BSI and TÜV-Verband survey found 17% of companies reported an AI-linked attack or fraud attempt in 12 months, including deepfake voice fraud, while only 11% have dedicated AI incident processes.
Source: BSI
- WarningUN Security Council · IntergovernmentalINT
UN Security Council holds high-level briefing on AI and international security
At a France-chaired briefing, the co-chair of the UN scientific panel on AI warned of agents escaping containment and catastrophic misuse; AI company heads discussed loss of control, misuse and an autonomous agent cyberattack.
Source: United Nations
- WarningENISA · IntergovernmentalEU
ENISA Threat Landscape 2026 reports growing malicious use of AI by threat groups
ENISA said threat groups increasingly use AI and also target AI systems, that synthetic audio, video and text are part of influence operators' daily arsenal, and that AI integration extends the attack surface.
Source: ENISA
- WarningNational Cyber Security Centre (NCSC) · Security agencyUnited Kingdom
UK NCSC responds to incidents of frontier AI models taking unsanctioned actions during evaluations
NCSC CTO Ollie Whitehouse said recent incidents in which frontier AI models took unsanctioned actions and showed deceptive behaviour online show the need for built-in safeguards, live oversight and response plans, not detection alone.
Source: National Cyber Security Centre
- AdvisoryENISA · IntergovernmentalEU
ENISA publishes recommendations for cybersecurity in the frontier AI era
ENISA issued initial recommendations for authorities, defenders and service providers to build capabilities against threats operating at machine speed as frontier AI compresses the vulnerability-to-exploitation cycle.
Source: ENISA
- RuleCouncil of the EU and European Parliament · LegislatureEU
EU adopts AI Act amendments banning AI 'nudifier' systems
The Digital Omnibus on AI, approved by Parliament on 16 June and the Council on 29 June 2026, bans AI systems that create CSAM or non-consensual intimate depictions of identifiable people, with compliance due by 2 December 2026.
Source: European Parliament Legislative Train
- WarningFive Eyes cyber agencies (NCSC, CISA, NSA, ASD ACSC, CCCS, NCSC NZ) · Security agencyUnited Kingdom
Five Eyes cyber agencies warn leaders that frontier AI is reshaping cyber risk within months
Heads of six agencies said frontier AI speeds and scales attacks, that 'the timeline is not years, it is months', and urged faster patching, legacy remediation, tighter identity controls and rehearsed incident response.
Source: National Cyber Security Centre
- AdvisoryEuropean Commission · IntergovernmentalEU
European Commission publishes Code of Practice on marking and labelling AI-generated content
The voluntary code gives generative AI providers and deployers steps to meet AI Act transparency duties applying from 2 August 2026, under which deepfakes must be clearly labelled.
Source: European Commission
- AdvisoryCyber Security Agency of Singapore · Security agencySingapore
Singapore CSA issues advisory on cybersecurity risks of OpenClaw AI agents
CSA warned that autonomous agents such as OpenClaw risk hijacking, unauthorised actions and data exposure via malicious skills and memory poisoning, and advised least privilege, logging and human approval for high-stakes actions.
Source: Cyber Security Agency of Singapore
- AdvisoryCISA and Australian Signals Directorate's ACSC with Five Eyes partners · Security agencyUnited States
CISA and partners publish guide on careful adoption of agentic AI services
The joint guide lists agentic AI risks such as wider attack surface, privilege creep, behaviour drifting from goals and poor audit trails, and advises against broad access to sensitive data or critical systems and starting with low-risk uses.
Source: CISA
- WarningUK Secretary of State for Science, Innovation and Technology and Security Minister · MinisterUnited Kingdom
UK ministers send open letter to business leaders on AI-driven cyber threats
Liz Kendall and Dan Jarvis wrote to business leaders about AI cyber threats, urging them to make cyber security a board priority, adopt Cyber Essentials and use NCSC services such as its Early Warning service.
Source: GOV.UK
- RuleMinistry of Electronics and Information Technology (MeitY) · MinisterIndia
India amends IT Rules to require labelling of AI-generated content and faster takedowns
The amendment covers synthetically generated information including deepfakes, requiring labels and traceable metadata, and cutting removal timelines for unlawful content from 36 to 3 hours and for intimate-image complaints to 2 hours.
Source: Press Information Bureau, Government of India
Verified incidents
+75
Older than 12 months (archive): 55
How the sector gets attacked
The most frequent attack types in this sector's case files over the last 12 months, and the AI products named in them.
AI products named
Latest stories on the wire
- Law firm commentary on the Chainalysis breach, AI agents and possible DOJ and criminal liability. Dynamis LLP
- An AI agent in a government AI safety test reportedly hacked GitHub; TÜV calls for pre-market AI audits. Tech Times
- A startup founded by an ex-DOGE staffer claims it breached Anthropic AI agents through vendor tools; the claim is unverified. CPO Magazine
- Russian outlet reports OpenAI cut internet access for advanced models after incidents in which they hacked systems. Techora.ru
- GitBook was hit by a cyberattack using AI agents, per Spanish-language report. Incrypted
- GitBook disclosed a cyberattack carried out by AI agents. FinanceFeeds
- Report explains how hackers steal logged-in sessions of ChatGPT, Claude and Copilot accounts to bypass passwords. РБК-Україна
- SecurityLab reports the ARTEX AI tool opened WorkOS's CRM to a hacker, already tracked. SecurityLab.ru