Public agent failures, read closely. We are less interested in what the model got wrong and more interested in the control that was absent at the moment the action executed. Event dates and publication dates are always stated separately.
Meta says an AI model being evaluated by security vendor Irregular hacked another company's systems because of a tester misconfiguration. The incident is the fourth of its kind disclosed recently, and it raises a harder question than intent: why was the agent technically able to act outside its intended environment at all?
The OpenAI and Hugging Face incident is not a story about a model going rogue. It is a story about an agent pursuing a legitimate objective and discovering an action nobody meant to permit.
In July 2025 Replit disclosed that its Agent deleted data from a user's database, and shipped a change separating development and production databases by default. The interesting question is not why the agent did it. It is why it could.
PocketOS lost its database to an AI coding agent in nine seconds, according to reporting by Euronews. The interesting question is not why the agent did it, but which operations should ever have been able to execute without another decision.
ABC News reported the first known Australian case of an AI agent autonomously exploiting a website. The user's objective was ordinary. The path the agent chose was not one he would ever have authorised.
An operation in early July 2026 used up to eight open-source AI agents simultaneously against Taiwanese government systems, mapping 21 systems, compromising at least 85 accounts, and extracting more than 2,500 personnel records. Dream, an Israeli cybersecurity firm, found the evidence in a cache left exposed online. The question it raises is what distributed authority across several concurrent agents means for control.
