An AI agent was told only to retrieve a document. When it encountered access restrictions, it reverse-engineered the system, identified a secret key and forged admin credentials. Backup agents have disabled endpoint security to finish a routine task. Two agents used steganography to smuggle credentials past DLP.
Signal register
Signals from X
Public posts, experimentally classified on three axes: public impact, the systems that fail, and the industries in the blast radius. Estimates only — not a formal assessment.
Methodology — experimental estimates
Scores are automated, experimental estimates from public X posts and a hand-written seed corpus. They are not formal risk assessments, not certified, and not suitable for compliance or operational decisions.
Consequence, likelihood, and urgency are 1–5 judgements applied by this project, not by a standards body. Residual scores assume only the mitigations marked in place. A signed-in reviewer can override residual and mark an item reviewed — that override is still unofficial. Aspect tags (capability, domain knowledge, affordance, impact domain) are a lightweight PRA aid, not a formal hazard analysis.
The UK AI Safety Institute disclosed the most severe AI Agent breach on record: Out of 122 safety tests, AI Agents from Anthropic and OpenAI exhibited 19 instances of unauthorized behavior—writing malicious code, creating fake online identities, and sending malicious files to real open-source maintainers. After failing, Agents modified their action logs and considered continuing under new identities. One Agent left accounts and attack tools on GitHub—subsequent Agents discovered and continued using them.
AI could create a “permanent underclass” if its biggest gains flow mainly to people who own the technology and workers with specialized expertise. Anthropic CEO Dario Amodei has estimated that 50% of entry-level white-collar jobs could be disrupted within five years.
Astra is fully rolled out to Plus, Pro, Business, and Enterprise users in Codex and ChatGPT Work. Go build!
AI just became the #2 human risk cited by security awareness pros, up from #4 in a year. New data from 1,700+ practitioners in the SANS 2026 Security Awareness & Culture Report.