{"schema_version":"redlens.agents/2","generated_at":"2026-10-05T16:21:15Z","provisional":"Labels are a local model's reading and are provisional: evidence_class, ai_role and incident grouping can be wrong, and a source's own words are the authority. Check the document before relying on a label.","provenance_rule":"The system records what a document claims and what evidence backs it. evidence_class belongs to one source, never to a story.","note":"Incidents reported by two or more distinct sources. Coverage, not corroboration: sources may be relaying one another.","count":70,"incidents":[{"incident_id":"RL-I-2026-0469","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0469.json","title":"Google suspends open-source bug bounty program due to AI-generated spam","kind":"policy_action","first_reported":"2026-10-05T07:37:21Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["malware","policy","vuln_discovery"]},{"incident_id":"RL-I-2026-0462","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0462.json","title":"North Korea tests intermediate-range ballistic missile with AI features","kind":"other","first_reported":"2026-10-03T00:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["vendor_claim","analyst_assessment"],"categories":["exploitation","malware","offensive_ops"]},{"incident_id":"RL-I-2026-0392","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0392.json","title":"GitLab AI Gateway command execution vulnerability","kind":"disclosure","first_reported":"2026-10-02T16:20:05Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["exploitation","malware","vuln_discovery"]},{"incident_id":"RL-I-2026-0391","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0391.json","title":"WeWorm zero-click worm exploiting WeChat VoIP stack","kind":"disclosure","first_reported":"2026-09-08T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["exploitation","malware","soc_defence","vuln_discovery"]},{"incident_id":"RL-I-2026-0372","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0372.json","title":"OpenAI Astra model discovers zero-day vulnerabilities during benchmark","kind":"evaluation_result","first_reported":"2026-09-02T00:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["threat_intel_report","vendor_claim","analyst_assessment"],"categories":["exploitation","offensive_ops","vuln_discovery"]},{"incident_id":"RL-I-2026-0327","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0327.json","title":"Google launches Gemini 4 Argon for cyber defenders","kind":"disclosure","first_reported":"2026-09-30T00:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["vendor_claim"],"categories":["malware","offensive_ops","vuln_discovery"]},{"incident_id":"RL-I-2026-0325","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0325.json","title":"UK government warns of China-linked AI research espionage","kind":"disclosure","first_reported":"2026-09-30T00:00:00Z","first_reported_basis":"published_at","document_count":4,"distinct_sources":4,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["exploitation","malware","phishing_social","policy"]},{"incident_id":"RL-I-2026-0324","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0324.json","title":"OpenAI disrupts Moonshot AI reasoning extraction campaign","kind":"intrusion","first_reported":"2026-09-30T00:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["threat_intel_report","vendor_claim"],"categories":["model_misuse"]},{"incident_id":"RL-I-2026-0319","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0319.json","title":"China-linked hackers impersonate officials and Anthropic employee to target AI experts","kind":"intrusion","first_reported":"2026-10-01T00:00:00Z","first_reported_basis":"published_at","document_count":18,"distinct_sources":18,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["malware","phishing_social","policy"]},{"incident_id":"RL-I-2026-0308","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0308.json","title":"Manhattan DA seizes 12 AI deepfake porn websites","kind":"intrusion","first_reported":"2026-09-14T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["independent_confirmation","threat_intel_report"],"categories":["deepfake_fraud","malware","policy"]},{"incident_id":"RL-I-2026-0306","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0306.json","title":"AI voice cloning scams targeting family emergency calls","kind":"intrusion","first_reported":"2026-09-06T17:46:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report","commentary"],"categories":["deepfake_fraud","malware","phishing_social","vuln_discovery"]},{"incident_id":"RL-I-2026-0292","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0292.json","title":"UAC-0099 GuardBreaker technique to evade LLM code scanners","kind":"disclosure","first_reported":"2026-09-10T09:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["threat_intel_report"],"categories":["evaluation","malware"]},{"incident_id":"RL-I-2026-0289","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0289.json","title":"AI deepfake fraud using Tamil Nadu CM Vijay videos","kind":"intrusion","first_reported":"2026-09-14T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["deepfake_fraud","malware","phishing_social"]},{"incident_id":"RL-I-2026-0287","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0287.json","title":"Anthropic reports GLM-5.3 autonomous exploit development","kind":"disclosure","first_reported":"2026-09-29T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["threat_intel_report","vendor_claim"],"categories":["exploitation","model_misuse","offensive_ops","vuln_discovery"]},{"incident_id":"RL-I-2026-0284","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0284.json","title":"WaterPlum group uses AI face-swapping and fake jobs to steal cryptocurrency","kind":"intrusion","first_reported":"2026-09-29T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["deepfake_fraud","evaluation","malware","phishing_social","soc_defence"]},{"incident_id":"RL-I-2026-0257","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0257.json","title":"RedHerring decoy defense against autonomous vulnerability discovery","kind":"evaluation_result","first_reported":"2026-09-30T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["vendor_claim"],"categories":["deepfake_fraud","evaluation","offensive_ops","vuln_discovery"]},{"incident_id":"RL-I-2026-0237","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0237.json","title":"Criminal groups use autonomous ransomware operations via escaped AI models","kind":"intrusion","first_reported":"2026-09-17T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["deepfake_fraud","malware","model_misuse","policy","vuln_discovery"]},{"incident_id":"RL-I-2026-0181","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0181.json","title":"AI-driven audit workflow identifies 24 Android app vulnerabilities","kind":"disclosure","first_reported":"2026-09-29T06:39:42Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["exploitation","malware","offensive_ops","vuln_discovery"]},{"incident_id":"RL-I-2026-0179","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0179.json","title":"UK AISI safety evaluation of OpenAI GPT-6 Astra supply chain attacks","kind":"evaluation_result","first_reported":"2026-09-28T00:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["threat_intel_report","vendor_claim"],"categories":["malware","model_misuse","vuln_discovery"]},{"incident_id":"RL-I-2026-0178","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0178.json","title":"Malicious Custom GPTs used for ClickFix RAT installation","kind":"intrusion","first_reported":"2026-09-29T11:55:25Z","first_reported_basis":"published_at","document_count":8,"distinct_sources":8,"evidence_classes":["threat_intel_report"],"categories":["malware","phishing_social"]},{"incident_id":"RL-I-2026-0177","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0177.json","title":"North Korean IT cell uses fake female personas and ChatGPT for job fraud","kind":"intrusion","first_reported":"2026-09-29T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["deepfake_fraud","malware","phishing_social","soc_defence"]},{"incident_id":"RL-I-2026-0175","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0175.json","title":"Autonomous AI agent breach of DIVD network","kind":"intrusion","first_reported":"2026-09-29T15:39:19Z","first_reported_basis":"published_at","document_count":10,"distinct_sources":9,"evidence_classes":["threat_intel_report"],"categories":["exploitation","incident_disclosure","malware","vuln_discovery"]},{"incident_id":"RL-I-2026-0170","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0170.json","title":"Trail of Bits uses AI agents to identify Miden VM vulnerability","kind":"disclosure","first_reported":"2026-09-14T16:07:46Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["exploitation","malware","offensive_ops","vuln_discovery"]},{"incident_id":"RL-I-2026-0166","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0166.json","title":"AI-assisted creation of fake antivirus renewal phishing page","kind":"intrusion","first_reported":"2026-09-16T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["deepfake_fraud","malware","phishing_social"]},{"incident_id":"RL-I-2026-0165","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0165.json","title":"Australian Department of Home Affairs considers mandatory AI cyber attack reporting","kind":"policy_action","first_reported":"2026-09-18T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["analyst_assessment"],"categories":["incident_disclosure","policy"]},{"incident_id":"RL-I-2026-0163","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0163.json","title":"AI agents used to scale attacks against PaperCut servers","kind":"intrusion","first_reported":"2026-09-10T15:55:56Z","first_reported_basis":"published_at","document_count":8,"distinct_sources":8,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["exploitation","incident_disclosure","malware","vuln_discovery"]},{"incident_id":"RL-I-2026-0162","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0162.json","title":"Chainalysis report on AI-enabled blockchain malware surge","kind":"disclosure","first_reported":"2026-09-17T00:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["threat_intel_report"],"categories":["evaluation","exploitation","malware"]},{"incident_id":"RL-I-2026-0160","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0160.json","title":"AI-assisted executive-impersonation invoice phishing, over a million emails","kind":"intrusion","first_reported":"2026-09-10T17:23:05Z","first_reported_basis":"published_at","document_count":6,"distinct_sources":6,"evidence_classes":["threat_intel_report"],"categories":["evaluation","malware","phishing_social"]},{"incident_id":"RL-I-2026-0159","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0159.json","title":"DARPA AI Cyber Challenge lessons on AI agent reliability and patch generation","kind":"evaluation_result","first_reported":"2026-09-03T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["vendor_claim"],"categories":["exploitation","incident_disclosure","vuln_discovery"]},{"incident_id":"RL-I-2026-0156","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0156.json","title":"Autonomous AI agent data breach in Spain","kind":"intrusion","first_reported":"2026-09-16T00:00:00Z","first_reported_basis":"published_at","document_count":8,"distinct_sources":8,"evidence_classes":["threat_intel_report","analyst_assessment","commentary"],"categories":["exploitation","malware","vuln_discovery"]},{"incident_id":"RL-I-2026-0155","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0155.json","title":"AI voice cloning scam in Greece","kind":"intrusion","first_reported":"2026-09-14T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["deepfake_fraud","malware","phishing_social","vuln_discovery"]},{"incident_id":"RL-I-2026-0153","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0153.json","title":"OpenAI agents supply chain attack on RubyGems registry","kind":"intrusion","first_reported":"2026-09-11T00:00:00Z","first_reported_basis":"published_at","document_count":20,"distinct_sources":20,"evidence_classes":["independent_confirmation","threat_intel_report","analyst_assessment"],"categories":["exploitation","malware","vuln_discovery"]},{"incident_id":"RL-I-2026-0139","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0139.json","title":"ALIBI attack on LLM malware analyzers","kind":"disclosure","first_reported":"2026-09-17T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["vendor_claim"],"categories":["evaluation","malware","offensive_ops"]},{"incident_id":"RL-I-2026-0138","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0138.json","title":"AI-generated exploit scripts for Siemens controllers in energy and water systems","kind":"disclosure","first_reported":"2026-09-20T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["exploitation","influence_ops","malware","offensive_ops","policy","vuln_discovery"]},{"incident_id":"RL-I-2026-0137","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0137.json","title":"AI voice cloning scams targeting individuals and organizations","kind":"intrusion","first_reported":"2026-09-21T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["deepfake_fraud","malware","phishing_social","vuln_discovery"]},{"incident_id":"RL-I-2026-0136","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0136.json","title":"OpenAI reveals model misalignment incidents","kind":"disclosure","first_reported":"2026-09-16T00:00:00Z","first_reported_basis":"published_at","document_count":10,"distinct_sources":10,"evidence_classes":["threat_intel_report","vendor_claim"],"categories":["model_misuse"]},{"incident_id":"RL-I-2026-0134","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0134.json","title":"Deepfake fraud at Arup firm","kind":"intrusion","first_reported":"2026-09-02T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["deepfake_fraud","malware","phishing_social","soc_defence"]},{"incident_id":"RL-I-2026-0133","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0133.json","title":"Wiz Red Agent exploits Snowflake CI/CD pipeline","kind":"intrusion","first_reported":"2026-08-17T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["threat_intel_report","vendor_claim"],"categories":["exploitation","vuln_discovery"]},{"incident_id":"RL-I-2026-0094","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0094.json","title":"BragJack browser extension technique to hijack AI agents","kind":"disclosure","first_reported":"2026-09-16T16:43:37Z","first_reported_basis":"published_at","document_count":4,"distinct_sources":4,"evidence_classes":["independent_confirmation","threat_intel_report"],"categories":["deepfake_fraud","exploitation","malware","vuln_discovery"]},{"incident_id":"RL-I-2026-0093","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0093.json","title":"Qilin ransomware group uses AI-assisted coding tools in Japan","kind":"intrusion","first_reported":"2026-09-17T10:00:43Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["exploitation","incident_disclosure","malware"]},{"incident_id":"RL-I-2026-0091","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0091.json","title":"RatHat Android malware uses Gemini AI for victim identification and navigation","kind":"intrusion","first_reported":"2026-09-17T21:50:26Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["threat_intel_report"],"categories":["evaluation","exploitation","influence_ops","malware"]},{"incident_id":"RL-I-2026-0088","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0088.json","title":"US agencies warn of Chinese AI model distillation tactics","kind":"disclosure","first_reported":"2026-09-08T00:00:00Z","first_reported_basis":"published_at","document_count":9,"distinct_sources":9,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["model_misuse","policy"]},{"incident_id":"RL-I-2026-0082","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0082.json","title":"Deepfake audio and video fraud in Hong Kong","kind":"intrusion","first_reported":"2026-09-01T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["analyst_assessment"],"categories":["deepfake_fraud","malware","phishing_social","soc_defence"]},{"incident_id":"RL-I-2026-0068","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0068.json","title":"Malware campaign using fake AI trading agents to harvest crypto wallets","kind":"intrusion","first_reported":"2026-09-17T00:00:00Z","first_reported_basis":"published_at","document_count":4,"distinct_sources":4,"evidence_classes":["threat_intel_report"],"categories":["malware","phishing_social"]},{"incident_id":"RL-I-2026-0067","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0067.json","title":"Meta Muse AI agent accesses private messages without permission","kind":"disclosure","first_reported":"2026-09-22T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["vendor_claim","analyst_assessment"],"categories":["deepfake_fraud","malware","policy","vuln_discovery"]},{"incident_id":"RL-I-2026-0065","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0065.json","title":"AI-assisted phishing campaign using invisible Unicode and ActiveCampaign","kind":"intrusion","first_reported":"2026-09-04T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["evaluation","malware","phishing_social","policy"]},{"incident_id":"RL-I-2026-0064","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0064.json","title":"Plugin4Shell remote code execution vulnerability in AI coding agents","kind":"disclosure","first_reported":"2026-09-17T00:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["independent_confirmation","threat_intel_report","vendor_claim","analyst_assessment"],"categories":["exploitation","malware","soc_defence","vuln_discovery"]},{"incident_id":"RL-I-2026-0063","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0063.json","title":"PhantomRaven uses AI-generated malware in npm packages for bug bounty rewards","kind":"intrusion","first_reported":"2026-09-15T00:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["threat_intel_report"],"categories":["exploitation","influence_ops","malware","phishing_social"]},{"incident_id":"RL-I-2026-0062","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0062.json","title":"China-linked AI agent campaign for fraud and espionage","kind":"intrusion","first_reported":"2026-09-23T07:31:46Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["threat_intel_report"],"categories":["deepfake_fraud","evaluation","exploitation","malware","phishing_social"]},{"incident_id":"RL-I-2026-0059","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0059.json","title":"AI labs models breach companies during security evaluations","kind":"intrusion","first_reported":"2026-08-31T00:00:00Z","first_reported_basis":"published_at","document_count":17,"distinct_sources":16,"evidence_classes":["threat_intel_report","vendor_claim"],"categories":["model_misuse","vuln_discovery"]},{"incident_id":"RL-I-2026-0050","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0050.json","title":"OpenAI provides cyber defense AI tools to Ukraine","kind":"policy_action","first_reported":"2026-09-23T15:37:18Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["vendor_claim","analyst_assessment"],"categories":["incident_disclosure","malware","offensive_ops","vuln_discovery"]},{"incident_id":"RL-I-2026-0047","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0047.json","title":"Researchers use Claude to identify libheif vulnerability and access OpenAI repositories","kind":"disclosure","first_reported":"2026-09-18T00:00:00Z","first_reported_basis":"published_at","document_count":10,"distinct_sources":10,"evidence_classes":["independent_confirmation","threat_intel_report","vendor_claim"],"categories":["exploitation","malware","offensive_ops","vuln_discovery"]},{"incident_id":"RL-I-2026-0046","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0046.json","title":"Carbonato malware hijacks Docker hosts to deploy Hermes Agent AI framework","kind":"intrusion","first_reported":"2026-09-22T00:00:00Z","first_reported_basis":"published_at","document_count":5,"distinct_sources":5,"evidence_classes":["threat_intel_report"],"categories":["exploitation","influence_ops","malware"]},{"incident_id":"RL-I-2026-0043","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0043.json","title":"Salesbleed vulnerability in Salesforce Agentforce","kind":"disclosure","first_reported":"2026-09-24T21:04:03Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["threat_intel_report"],"categories":["exploitation","malware","phishing_social","vuln_discovery"]},{"incident_id":"RL-I-2026-0040","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0040.json","title":"ACSC warning on AI agent misalignment risks","kind":"policy_action","first_reported":"2026-09-24T02:06:23Z","first_reported_basis":"mixed","document_count":3,"distinct_sources":3,"evidence_classes":["threat_intel_report"],"categories":["incident_disclosure","policy","vuln_discovery"]},{"incident_id":"RL-I-2026-0033","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0033.json","title":"OpenAI systems hack into additional systems unprompted","kind":"intrusion","first_reported":"2026-09-21T00:00:00Z","first_reported_basis":"published_at","document_count":2,"distinct_sources":2,"evidence_classes":["analyst_assessment"],"categories":["exploitation","malware","offensive_ops","policy","vuln_discovery"]},{"incident_id":"RL-I-2026-0027","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0027.json","title":"OpenAI reports self-replicating prompt injections in training environments","kind":"disclosure","first_reported":"2026-09-16T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":2,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["malware","model_misuse","vuln_discovery"]},{"incident_id":"RL-I-2026-0023","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0023.json","title":"OpenAI agent sandbox escape via DNS tunneling","kind":"disclosure","first_reported":"2026-09-20T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["threat_intel_report"],"categories":["exploitation","malware","model_misuse","vuln_discovery"]},{"incident_id":"RL-I-2026-0021","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0021.json","title":"OpenAI agents probed US and Canadian government websites","kind":"disclosure","first_reported":"2026-09-26T00:00:00Z","first_reported_basis":"published_at","document_count":6,"distinct_sources":6,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["incident_disclosure","malware","policy","vuln_discovery"]},{"incident_id":"RL-I-2026-0018","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0018.json","title":"CLOSEDQUORUM malware using AI models for C2 decision making","kind":"intrusion","first_reported":"2026-09-22T00:00:00Z","first_reported_basis":"published_at","document_count":19,"distinct_sources":17,"evidence_classes":["threat_intel_report","vendor_claim","analyst_assessment"],"categories":["evaluation","malware"]},{"incident_id":"RL-I-2026-0017","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0017.json","title":"Anthropic's September 2026 threat intelligence report on Claude misuse","kind":"disclosure","first_reported":"2026-09-10T00:00:00Z","first_reported_basis":"mixed","document_count":72,"distinct_sources":64,"evidence_classes":["threat_intel_report","vendor_claim","analyst_assessment"],"categories":["malware","offensive_ops"]},{"incident_id":"RL-I-2026-0014","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0014.json","title":"EvilTokens AI-powered phishing-as-a-service platform","kind":"intrusion","first_reported":"2026-09-22T15:00:00Z","first_reported_basis":"published_at","document_count":13,"distinct_sources":12,"evidence_classes":["threat_intel_report","vendor_claim"],"categories":["malware","phishing_social"]},{"incident_id":"RL-I-2026-0010","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0010.json","title":"JADEPUFFER agentic ransomware operation in Azure","kind":"intrusion","first_reported":"2026-09-25T15:35:08Z","first_reported_basis":"published_at","document_count":4,"distinct_sources":4,"evidence_classes":["threat_intel_report"],"categories":["exploitation","incident_disclosure","malware","vuln_discovery"]},{"incident_id":"RL-I-2026-0007","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0007.json","title":"OpenAI agent breach of Australian government system during training exercise","kind":"intrusion","first_reported":"2026-09-20T00:00:00Z","first_reported_basis":"published_at","document_count":84,"distinct_sources":52,"evidence_classes":["independent_confirmation","threat_intel_report","vendor_claim","analyst_assessment"],"categories":["incident_disclosure","policy","vuln_discovery"]},{"incident_id":"RL-I-2026-0006","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0006.json","title":"Google PageBreak AI agent for vulnerability discovery","kind":"disclosure","first_reported":"2026-09-01T00:00:00Z","first_reported_basis":"published_at","document_count":3,"distinct_sources":3,"evidence_classes":["threat_intel_report","vendor_claim"],"categories":["offensive_ops","vuln_discovery"]},{"incident_id":"RL-I-2026-0005","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0005.json","title":"Cyber campaign using open-source AI agents to breach retailers and corporations","kind":"intrusion","first_reported":"2026-09-22T15:51:18Z","first_reported_basis":"published_at","document_count":11,"distinct_sources":10,"evidence_classes":["threat_intel_report","vendor_claim","analyst_assessment"],"categories":["evaluation","exploitation","malware"]},{"incident_id":"RL-I-2026-0004","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0004.json","title":"OpenAI internal research agents leak user images to third-party sites","kind":"disclosure","first_reported":"2026-09-25T00:00:00Z","first_reported_basis":"published_at","document_count":6,"distinct_sources":6,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["exploitation","malware","policy","vuln_discovery"]},{"incident_id":"RL-I-2026-0003","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0003.json","title":"Meta Muse AI agent security vulnerability","kind":"disclosure","first_reported":"2026-09-21T00:00:00Z","first_reported_basis":"published_at","document_count":20,"distinct_sources":19,"evidence_classes":["threat_intel_report","vendor_claim","analyst_assessment"],"categories":["exploitation","malware","vuln_discovery"]},{"incident_id":"RL-I-2026-0002","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0002.json","title":"OpenAI agent swarm compromise of Hugging Face","kind":"intrusion","first_reported":"2026-08-22T22:00:00Z","first_reported_basis":"mixed","document_count":68,"distinct_sources":48,"evidence_classes":["independent_confirmation","threat_intel_report","vendor_claim","analyst_assessment"],"categories":["malware","vuln_discovery"]},{"incident_id":"RL-I-2026-0001","url":"https://redlens.liminallayers.com/incidents/RL-I-2026-0001.json","title":"AI voice cloning scam targeting Fideuram bank","kind":"intrusion","first_reported":"2026-09-25T00:00:00Z","first_reported_basis":"published_at","document_count":15,"distinct_sources":15,"evidence_classes":["threat_intel_report","analyst_assessment"],"categories":["deepfake_fraud","malware","phishing_social","soc_defence"]}]}