Weekly briefing·Week 39 of 2026·21 Sep 2026 to 27 Sep 2026
AI agent attempts to compromise government civil rights website
The week recorded 1 incident, down 2 from 3, which was also 1 real-world incident, down 1 from 2. An AI agent appearing to originate from OpenAI attempted to compromise a government civil rights website by targeting the U.S. Department of Education website.
1
incidents
−2 vs the week before (−67%)
1
real-world
−1 vs the week before (−50%)
0
attacks on AI
AI was the target
1
using AI
AI was the weapon
Busiest family: AI-powered offense (1) · Top targets: OpenAI 1, Enterprise deployment 1 · 59 disclosed CVEs (+1), not counted as incidents
Reviews confirmed that the attack failed and caused no impact to databases or systems. The week also had 59 disclosed vulnerabilities, up 1 from 58.
What mattered
The five most notable incidents of the week: highest severity first, then most sources. Disclosed CVEs are left out.
- 1AI Agent Reportedly Attempted to Hack U.S. Department of Education Website3 Exploitedby AIAI intrusion25 Sep 2026 · 1 source