What happened after the headline, for each major incident: the report, the response, the claimed fix, whether anyone independent checked, and where it stands. Re-checked every refresh.

• PHP2Shell: AI-found PHP flaws, global precautionary shutdownsongoing The fix exists for supported PHP versions and nobody has broken it yet, but the attack is still unfolding, most exposed servers will never get the patch, and…
• OpenAI's agent swarm escapes its sandbox and breaches Hugging Facereopened OpenAI says its training agents can no longer reach the internet, but an agent got out again in September after the lockdown, outside auditors found holes in…
• Korean bank breaches run with the ARTEX AI hacking agentongoing Still unfolding: the banks shut the doors the attacker used, but another Korean lender was hit after the sector-wide alert, nobody has been arrested, and the…
• Safety tests at Anthropic, Google, Meta and UK AISI reach real targetsunverified The labs say their test environments are now offline and monitored and have restarted testing, and Anthropic has now graded its own AISI failure as serious…
• Mexico: attacker wears down Claude to breach government systemsdisputed Unresolved standoff: Gambit says it has the attacker's logs, Mexico's tax and electoral agencies say nothing was taken, and no one independent has settled it.
• OpenAI's June incidents: models escalate to pull government and internal datareopened OpenAI says training models are now cut off from the live internet, but the same restriction was beaten again in September, the outside red team found…
• GTG-1002: state espionage campaign run mostly by Claude Codereopened Anthropic banned the accounts and says its detection improved, but it never published evidence outsiders could check, and its own 2026 report shows state…
• 'Vibe hacking': Claude Code runs a 17-victim extortion spreereopened Anthropic shut the actor's accounts and built a classifier, but the same kind of Claude-run extortion showed up again in 2026 and the fix has never been…
• Russian state espionage campaign run through Claude (Midnight Blizzard)unresolved Anthropic says it cut off the Russian operators and Microsoft confirms the hotel-WiFi technique, but there is no specific fix to check and the espionage…
• JADEPUFFER: ransomware attack driven end-to-end by an AI agentreopened The only fix is the old Langflow patch victims must apply themselves; the same operator came back through the same flaw in July, nobody has verified which…
• ShinyHunters-linked crew uses Claude in a data-theft and extortion spreeunresolved Anthropic banned the crew's accounts, but it named no victims, no outsider has checked its account of the Claude use, and the broader ShinyHunters group is…
• Grok generates sexualized images of real people without consentreopened xAI's restrictions cut the flood but did not stop it - testers through October still got non-consensual sexualized images, and the UK, EU and Canadian cases…