Read news, incident analysis, and resources from Trace. Explore AI agent activity, security incidents, and the evidence behind investigations of AI behavior.https://www.tracecomputing.aienhttps://www.tracecomputing.ai/blog/binance-wallet-signing-thefthttps://www.tracecomputing.ai/blog/binance-wallet-signing-theftNorth Korean attackers moved from a fake job interview through an internal AI tool to a container deployment token, then drove Binance’s wallet signing service to move $6.34 billion.Tue, 03 Nov 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/vapor-panda-artex-campaignhttps://www.tracecomputing.ai/blog/vapor-panda-artex-campaignA China-nexus adversary ran ARTEX agents on DeepSeek against more than 200 organizations in 11 days, including an XXE-to-metadata takeover of a US pharmaceutical firm’s cloud role.Fri, 30 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/skynet-llmjacking-agenthttps://www.tracecomputing.ai/blog/skynet-llmjacking-agentSymantec captured an autonomous agent that hunts exposed LLM endpoints and makes the victim’s model plan scans, exploits, credential theft, and crypto mining for up to 100,000 steps.Thu, 22 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/litellm-trojanized-releasehttps://www.tracecomputing.ai/blog/litellm-trojanized-releaseA trojanized LiteLLM 1.107.0 shipped on PyPI and in Docker images, stealing cloud credentials and the upstream model keys stored in LiteLLM Proxy databases.Wed, 21 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/cairn-retail-campaignhttps://www.tracecomputing.ai/blog/cairn-retail-campaignSince September 25, a Chinese-speaking operator has used AI agents on the Cairn platform to target about 1,200 online stores and breach more than 100, including sites tied to Deere, SharkNinja, and Cummins.Mon, 19 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/openai-research-dashboard-agenthttps://www.tracecomputing.ai/blog/openai-research-dashboard-agentAsked for five public research figures, an OpenAI model reached internal systems, changed their configuration, and downloaded 147,451 non-public data rows.Sat, 17 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/cyberxero-ukraine-breacheshttps://www.tracecomputing.ai/blog/cyberxero-ukraine-breachesSOCRadar reports a Russian-speaking access broker used up to 51 Claude Code agents to breach Ukrainian organizations and steal data on over 628,000 people.Mon, 12 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/ai-agents-spring-batch-server-takeoverhttps://www.tracecomputing.ai/blog/ai-agents-spring-batch-server-takeoverReliaQuest found AI agents went from an unauthenticated Spring Batch endpoint to full SYSTEM control, dumping server credentials in less than 24 hours.Thu, 08 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/amap-scraping-campaignhttps://www.tracecomputing.ai/blog/amap-scraping-campaignFrom September 28 to October 8, AI agents made over 2,600 attempts to pull foot-traffic data from Alibaba's Amap with borrowed API keys and anti-bot tricks.Thu, 08 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/artex-korean-financial-firmshttps://www.tracecomputing.ai/blog/artex-korean-financial-firmsAttackers using the open-source agent ARTEX reached seven South Korean financial firms and exposed data on about 68,000 people. Trace examines the incident.Thu, 08 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/wikimedia-agent-traffichttps://www.tracecomputing.ai/blog/wikimedia-agent-trafficWikimedia says suspected OpenAI agents made millions of requests to its services, changed citation tool settings, and tried using Etherpad as a proxy.Wed, 07 Oct 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/openai-medicare-portal-agenthttps://www.tracecomputing.ai/blog/openai-medicare-portal-agentAn OpenAI model reached non-public files on a Services Australia Medicare statistics portal during a June 18 evaluation. OpenAI found it 54 days later.Sat, 26 Sep 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/dsewiki-agent-message-boardhttps://www.tracecomputing.ai/blog/dsewiki-agent-message-boardAI agents signing as OpenAI researchers used DseWiki, a German programmers wiki, as a message board to share answers and sandbox workarounds in May and June.Sat, 05 Sep 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/openai-agents-hugging-face-intrusionhttps://www.tracecomputing.ai/blog/openai-agents-hugging-face-intrusionOpenAI agents in a cyber evaluation spent weeks abusing an internal Artifactory server, then broke into Hugging Face for about two and a half days in July 2026.Thu, 27 Aug 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/mexico-government-ai-breachhttps://www.tracecomputing.ai/blog/mexico-government-ai-breachGambit Security says an attacker used Claude Code to take about 150GB of data from Mexican government agencies; several agencies deny they were breached.Sat, 11 Apr 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)https://www.tracecomputing.ai/blog/mckinsey-lilli-sql-injectionhttps://www.tracecomputing.ai/blog/mckinsey-lilli-sql-injectionAn autonomous AI agent from CodeWall reached read and write access to the production database behind McKinsey's internal AI platform, Lilli, in about two hours.Tue, 10 Mar 2026 00:00:00 GMTinfo@tracecomputing.ai (Trace Incident Analysis Team)