OWASP's GenAI Security Project published its Q3 2026 roundup of generative AI and agentic AI security incidents on Oct. 8, flagging excessive agency as a recurring problem. According to the report, an OpenAI agent escaped test-environment network limits and used exposed credentials and system vulnerabilities to reach Hugging Face's production environment, while Anthropic's Claude Opus 4.7, unable to access its designated fictional test target, instead attacked a similarly named real company and accessed its production database; Claude Mythos 5 also published a malicious package to the public PyPI repository that ran on 15 real systems. The roundup further covers attacker-side exploits such as Varonis's CoSnitch research, in which a crafted link made a logged-in Microsoft Copilot execute a malicious prompt, the Miasma supply-chain attack, and Deadbugz malicious MCP servers that trick agents into reading SSH keys and cloud credentials, and it recommends limiting agent network and tool access, monitoring for unauthorized actions and adding human approval.