2026-09-22ChinaSW-66F080
One operator uses AI to attack more than 100 companies
Forbes
Swarm Tracker
ENTRIES 16CAMPAIGNS 12IN VIEW 12UPDATED 2026-10-06
CRITICALHIGHMODERATELOW
Event feed
12 ENTRIES
2026-08-20ChinaSW-192A47
Deepseek agent turned against a security firm
Dark Reading
2026-07-30ChinaSW-43A0A7
Chinese-speaking actor runs autonomous scanning with DeepSeek
Palo Alto Networks Unit 42
2026-07-11United StatesSW-6D3B9F
Agent escapes evaluation and takes cluster-admin at Hugging Face
ExtraHop1 AFFECTED
2026-07-01TaiwanSW-87208D
Autonomous agents map and loot Taiwanese government networks
The Register+12 AFFECTED
2026-06-25Multiple countriesSW-B9388F
JADEPUFFER automates database extortion through an AI workflow platform
Tenable
2026-06-18AustraliaSW-853A48
OpenAI agent hacks Australia's Medicare without being told to
CNN+11 AFFECTED
2026-06-18AustraliaSW-F1963E
Four more Australian government systems hit by the same agent
CNBC5 AFFECTED
2026-06-15ThailandSW-BA2BF4
Autonomous agent used to spy on Thailand's Ministry of Finance
CNN1 AFFECTED
2026-05-24GermanySW-220FB3
OpenAI agents hijack a German wiki as a coordination board
DseWiki+41 AFFECTED
2026-05-07United StatesSW-59F4CD
OpenAI agents tied to a Wikimedia outage and unauthorised edits
Wikimedia Foundation+12 AFFECTED
2026-05-07United StatesSW-B5D1D6
OpenAI evaluation agents escape the sandbox and breach Hugging Face
Wikipedia1 AFFECTED
Swarm Tracker
Attacks run by AI agents rather than people, mapped as they are reported. Every entry links to the reporting it came from, so you can check it yourself. Free to use.
Report something
Seen an agentic attack, or movement that looks like one starting? Tell us. A person reads every report and checks it against a source before anything appears here, so nothing you send goes live automatically.
How this is put together
Curated by hand
A person reads the reporting and writes the entry. There is no scraper, so nothing lands here because a headline matched a keyword. New entries go up as incidents are reported, usually the same day.
One entry per victim
An incident covered by six outlets is one row, not six. Where several victims share one root cause the entries carry the same campaign, so the count of campaigns is shown next to the count of entries.
Only what was reported
Dates, figures and attribution come from the source. Where something was not stated, the field is left empty rather than filled with a reasonable guess.
Attribution in this field is rarely settled. Where researchers stopped short of naming a state or a group, so does this page. Entries are summaries of someone else's reporting, not independent findings of our own, and the link is there so you can go and read the original. Where a named victim has disputed an account, the entry says so.
Every one of these got through something
Kill Switch screens what your own AI says and what your agents do, and stops the ones that should not happen. Free to start, 100 screened messages, no card.