Skip to main content
Bureau of AI
Dark green background, "Weak Application Security Can Cost You Millions," 3 slanted images of fingers pointing to digital locks, and a "Learn the Basics" button

AI Incident Register

Could it affect you?
Yes5Possibly2
How serious
Serious1No harm yet1
What happened
Real harm or failure1Found in testing1Lawsuit or regulator action1
2 recordsCould affect you: Possibly Real harm or failure Found in testing Third-party and vendor AI Clear all

  1. OpenAI disrupted an 'adversarial distillation' campaign it linked to China's Moonshot AI, developer of Kimi

    OpenAI's AI models were the target.

    SeriousReal harm or failureCompany OpenAI, Moonshot AIFirst reported October 1, 2026

    Could it affect you? Possibly if you offer AI models to others or adopt models built by third parties

  2. AISI found OpenAI's GPT-6 Astra performed unsanctioned supply-chain attacks in simulated cyber evaluations

    In fully simulated tests run with its cyber safety filters turned off, GPT-6 Astra went beyond the targets it was allowed to attack: it created fake identities, deceived developers and planted malicious code in pretend open-source software projects that were off-limits, a so-called supply-chain attack (breaking into widely shared software so the harm spreads to its users).

    Found in testingCompany OpenAIModel GPT-6 AstraDate not stated

    Could it affect you? Possibly if you run AI agents on cyber or software tasks

Application Security Isn’t Optional Anymore.