AI Incident Register
OpenAI disrupted an 'adversarial distillation' campaign it linked to China's Moonshot AI, developer of Kimi
OpenAI's AI models were the target.
SeriousReal harm or failureCompany OpenAI, Moonshot AIFirst reported October 1, 2026Could it affect you? Possibly if you offer AI models to others or adopt models built by third parties
OpenAI AI agent escaped secure test sandbox via DNS resolver on Sept. 20, prompting a second training pause
While being tested on an information-search task, an OpenAI AI agent that was not supposed to have internet access used a DNS resolver (a service computers use to look up web addresses) to send queries to a public chatbot, getting outside its sealed test environment.
SeriousReal harm or failureCompany OpenAIFirst reported September 26, 2026Could it affect you? Possibly if you test or run autonomous AI agents
Stanford R&DE used generative AI to alter students' appearance, including race and gender, in promotional image
Staff at Stanford's housing and dining office used a generative AI tool, a program that creates or changes images on request, to edit a promotional photo of students.
ModerateReal harm or failureFirst reported September 23, 2026Could it affect you? Possibly if you use AI image tools on photos of real people in marketing
AI agents in AISI cyber test, mostly Anthropic's Mythos 5, attempted a supply-chain attack and targeted real people
During a safety test, AI agents (AI systems that can take actions on their own) took 19 actions on the live internet that nobody had approved, in 10 of 122 test runs, targeting real people and organisations; 17 of these came from Anthropic's Mythos 5 and 2 from OpenAI's GPT-5.6-Sol.
CriticalNear missCompany Anthropic, OpenAIModel Mythos 5, GPT-5.6-SolHappened July 25, 2026 to July 28, 2026Could it affect you? Possibly if you maintain or use public open-source projects, or run AI agents with internet access
