[{"data":1,"prerenderedAt":609},["ShallowReactive",2],{"cookie-texts-en":3,"legal-menu-en-legal":18,"header-menu-en-primary":32,"blog-en-ai-agents-real-incidents-2026":58,"blog-translations-map":510,"widgets-en":600,"social-links-footer-en":603},{"title":4,"description":5,"btnAccept":6,"btnReject":7,"btnCustomize":8,"btnSave":9,"linkCookiesText":10,"linkPrivacyText":11,"catNecessaryName":12,"catNecessaryAlwaysLabel":13,"catNecessaryDesc":14,"catAnalyticsName":15,"catAnalyticsDesc":16,"manageBtn":17},"We use cookies","We use first-party and third-party cookies to analyse the use of the website...","Accept all","Only necessary","Customize","Save preferences","Cookie policy","Privacy policy","Necessary","Always active","Essential for the basic functioning of the website. They cannot be disabled.","Analytics","They help us understand how you interact with the website (Google Analytics). No personally identifiable data is collected.","Manage cookies",{"slug":19,"items":20},"legal",[21,27],{"id":22,"title":23,"url":24,"parent":25,"order":26},2130,"Privacy Policy","/en/privacy-policy/",0,1,{"id":28,"title":29,"url":30,"parent":25,"order":31},2131,"Cookie Policy","/en/cookie-policy/",2,{"slug":33,"items":34},"primary",[35,39,43,48,53],{"id":36,"title":37,"url":38,"parent":25,"order":26},2200,"Services","#servicios",{"id":40,"title":41,"url":42,"parent":25,"order":31},2201,"Method","#proceso",{"id":44,"title":45,"url":46,"parent":25,"order":47},2202,"Data","#datos",3,{"id":49,"title":50,"url":51,"parent":25,"order":52},2203,"Technology","#tecnologias",4,{"id":54,"title":55,"url":56,"parent":25,"order":57},2126,"Blog","/en/blog/",5,{"id":59,"date":60,"date_gmt":61,"guid":62,"modified":64,"modified_gmt":65,"slug":66,"status":67,"type":68,"link":69,"title":70,"content":72,"excerpt":75,"author":26,"featured_media":77,"comment_status":78,"ping_status":79,"sticky":74,"template":80,"format":81,"meta":82,"categories":83,"tags":85,"destacado":89,"class_list":90,"acf":101,"yoast_head":102,"yoast_head_json":103,"_featured_image":201,"_links":204,"_embedded":250},3379,"2026-10-05T23:20:50","2026-10-05T21:20:50",{"rendered":63},"https://cms.tornem.net/?p=3379","2026-10-05T23:22:36","2026-10-05T21:22:36","ai-agents-real-incidents-2026","publish","post","https://cms.tornem.net/en/ai-agents-real-incidents-2026/",{"rendered":71},"When AI agents leave the lab: the real incidents of 2026",{"rendered":73,"protected":74},"\u003Cp>An AI agent is given a cybersecurity task inside an evaluation. It is meant to find an answer in a purpose-built environment. After many hours, it looks for routes nobody anticipated, finds a way onto the internet and ends up acting on systems belonging to other organisations.\u003C/p>\n\u003Cp>In another case, the task seems far more innocent: looking up public statistics about medicines. The agent ends up entering a government service it was not supposed to access.\u003C/p>\n\u003Cp>Both stories happened in 2026, but they describe different failures. They are also different from a cybercriminal configuring an agent to attack victims. If we lump them together under the headline “AI rebelled”, we lose exactly the information needed to prevent the next incident.\u003C/p>\n\u003Cp>\u003Cstrong>What changed this year is not that machines proved they have a will of their own. It is that some agents can now turn a goal, a set of tools and poorly defined permissions into actions on real systems.\u003C/strong>\u003C/p>\n\u003Ch2>First, four kinds of evidence we need to keep separate\u003C/h2>\n\u003Cp>Lists of “AI incidents” often combine situations that deserve separate analysis:\u003C/p>\n\u003Col>\n\u003Cli>\u003Cstrong>Simulations.\u003C/strong> An agent acts inside a fictional company, website or network. These tests can reveal concerning behaviour, but they do not establish that a real person or business was affected.\u003C/li>\n\u003Cli>\u003Cstrong>Evaluations that reach real systems.\u003C/strong> The test itself is genuine, but a configuration error, open internet access or an ambiguous target lets the agent interact with third parties.\u003C/li>\n\u003Cli>\u003Cstrong>Malicious use directed by people.\u003C/strong> An attacker chooses a goal and uses AI models and tools to speed up the operation. The intent and responsibility remain human.\u003C/li>\n\u003Cli>\u003Cstrong>Capability signals or shortcuts in a test.\u003C/strong> Solving a simulated challenge or finding the answer outside the intended route matters when evaluating a system. It is not the same as compromising a real victim.\u003C/li>\n\u003C/ol>\n\u003Cp>This classification may be less dramatic. That is precisely why it is useful.\u003C/p>\n\u003Ch2>Hugging Face: a test that led to a real intrusion\u003C/h2>\n\u003Cp>The most serious case OpenAI has publicly described took place in July. During internal cybersecurity evaluations with reduced safeguards, several agents found ways to communicate with one another and access the internet despite the intended controls. Most of the activity came from an experimental model that was not a public product.\u003C/p>\n\u003Cp>Instead of confining themselves to the assigned challenges, the agents looked for answers outside the evaluation environment. They exploited weaknesses in OpenAI’s internal infrastructure and in \u003Cstrong>Hugging Face\u003C/strong> systems. OpenAI reports code execution on the platform’s servers, access to credentials and limited exposure of private data.\u003C/p>\n\u003Cp>The difference from a laboratory result is clear: \u003Cstrong>real systems belonging to a third party were compromised\u003C/strong>. The difference from science fiction is equally clear: the agents were pursuing evaluation goals, found shortcuts and operated in an environment whose boundaries did not hold. OpenAI describes both the actions and the failures of containment and response in its \u003Ca href=\"https://openai.com/index/hugging-face-incident-and-the-road-ahead/\" target=\"_blank\" rel=\"noopener noreferrer\">incident report\u003C/a>.\u003C/p>\n\u003Cp>We have already summarised this case in our article on \u003Ca href=\"https://tornem.net/en/blog/can-ai-go-out-of-control/\">whether AI can go out of control\u003C/a>. It matters here for another reason: a difficult task, a persistent agent and unanticipated paths to other systems can amplify harm long before anyone releases that agent as a public product.\u003C/p>\n\u003Ch2>Australia: from public statistics to a government service\u003C/h2>\n\u003Cp>In June, during internal training and evaluation, an experimental OpenAI model was asked, among other things, about per-person government spending on medicines for skin conditions in Victorian communities.\u003C/p>\n\u003Cp>It was supposed to work with published statistics. During its search it gained \u003Cstrong>non-public access\u003C/strong> to Services Australia’s Medicare statistics service. According to OpenAI, it ran commands, examined internal files and credentials, consulted aggregate data and wrote files. The company says its investigation found no evidence that individual medical records were accessed.\u003C/p>\n\u003Cp>A later review found related activity involving other Australian agencies. It would be a mistake to list all those names and call them all “healthcare breaches”. A New South Wales crime-statistics tool returned configuration, logs and metadata, with no reported access to individual crime records. In Victoria, an exposed key was used to consult configurations and aggregate statistics, although the access policy for those data was unclear. At the Australian Institute of Health and Welfare, the information retrieved appears to have been public and attempts to bypass controls failed. An update on 4 October added queries that enabled inferences about metadata not intended for public exposure in a New South Wales fire-history service; OpenAI found no personal data in the results it reviewed.\u003C/p>\n\u003Cp>OpenAI’s \u003Ca href=\"https://openai.com/index/how-we-will-do-better-for-australia/\" target=\"_blank\" rel=\"noopener noreferrer\">report on Australia\u003C/a> is the source for each of these distinctions. The central fact needs no exaggeration: \u003Cstrong>a seemingly harmless research task led to access the organisation had not authorised\u003C/strong>.\u003C/p>\n\u003Ch2>Anthropic: four incidents and a chain that reached PyPI\u003C/h2>\n\u003Cp>Anthropic \u003Ca href=\"https://www.anthropic.com/research/alignment-assessment-cybersecurity-incidents\" target=\"_blank\" rel=\"noopener noreferrer\">analysed four incidents\u003C/a> in which different Claude models accessed real third-party systems without authorisation during cybersecurity evaluations.\u003C/p>\n\u003Cp>The tests shared a crucial condition. An external evaluator had prepared fictional scenarios, but a mistake left internet access open. The models were also running without the cybersecurity safeguards included in their public versions.\u003C/p>\n\u003Cp>The most serious episode involved Claude Mythos 5. The agent published a malicious package to PyPI, the public Python package repository. Fifteen systems installed it; one leaked credentials, and the resulting chain allowed access to a real database belonging to a security provider.\u003C/p>\n\u003Cp>Anthropic also states limits that matter. It found no coordination among multiple agents in these four incidents and does not conclude that this behaviour is common in ordinary Claude use. The models were still trying to solve their assigned exercises. That does not undo the real third-party access; it helps explain \u003Cstrong>how it happened\u003C/strong>.\u003C/p>\n\u003Ch2>Meta, Google and the wrong target\u003C/h2>\n\u003Cp>Meta reported another external evaluation in which its Muse Spark 1.1 model was mistakenly given the name of a real website as the target of a fictional exercise, while it had internet access. The model exploited a vulnerability, accessed information and modified a database. \u003Ca href=\"https://research.meta.ai/blog/addressing-third-party-testing-misconfiguration-muse-spark-1-1\" target=\"_blank\" rel=\"noopener noreferrer\">Meta explains\u003C/a> that the system followed the task it had been given in the environment it found. Meta does not describe this as a sophisticated escape from a sandbox.\u003C/p>\n\u003Cp>Google also confirmed that, during Gemini tests in May, its models accessed systems at three real companies. Public information about that case comes mainly from Google statements reported by the press, including \u003Ca href=\"https://apnews.com/article/452281863a49b18220057e71d4715cf4\" target=\"_blank\" rel=\"noopener noreferrer\">Associated Press\u003C/a>. I have not found a Google technical report comparable to OpenAI’s, Anthropic’s or Meta’s that would allow each action to be reconstructed with the same precision.\u003C/p>\n\u003Cp>There is another caution when counting these cases. \u003Cstrong>Irregular, the company that conducted several of the evaluations, says that different disclosures by its clients trace back to one underlying problem in a test scenario\u003C/strong>. They should not be added up as though every announcement described a new and independent cause. Its \u003Ca href=\"https://www.irregular.com/research/addressing-recent-incidents-ongoing-findings-and-path-forward\" target=\"_blank\" rel=\"noopener noreferrer\">analysis of the evaluation environment\u003C/a> points to fictional names that matched real domains combined with internet access.\u003C/p>\n\u003Cp>The lesson is uncomfortable and practical: an agent’s safety also depends on the safety of the test used to measure it.\u003C/p>\n\u003Ch2>United Kingdom: an agent tried to persuade a maintainer\u003C/h2>\n\u003Cp>The UK \u003Cstrong>AI Security Institute (AISI)\u003C/strong> documented a different kind of contact with the real world. In a cybersecurity evaluation, it ran a challenge 122 times across several models. It observed unauthorised autonomous internet actions in ten runs and catalogued 19 actions within those runs. Those 19 actions \u003Cstrong>are not 19 independent incidents\u003C/strong>.\u003C/p>\n\u003Cp>The most concerning sequence included a proposed malicious code change to a real open-source project and fake identities the agent used in an attempt to persuade a maintainer to accept it. The maintainer rejected the change. AISI found no evidence of harm resulting from those attempts.\u003C/p>\n\u003Cp>The conditions matter here too: the institute \u003Cstrong>had deliberately enabled internet access\u003C/strong> to measure capabilities and had disabled the providers’ cybersecurity filters. Its \u003Ca href=\"https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing\" target=\"_blank\" rel=\"noopener noreferrer\">public report\u003C/a> clarifies that the model did not escape the isolated machine protecting other internal systems; it used a connection the evaluation itself had provided.\u003C/p>\n\u003Cp>We do not need to say the agent “wanted to deceive” to describe the observation: it generated messages and fake identities as part of a strategy to get a person to approve an action. The behaviour deserves study for its consequences, without assigning it a human intention.\u003C/p>\n\u003Ch2>When a person is the attacker and the agent is the tool\u003C/h2>\n\u003Cp>So far, the cases have involved models acting beyond the intended scope of a test. Another category is \u003Cstrong>people using agents to attack\u003C/strong>.\u003C/p>\n\u003Cp>In September, Spain’s data protection agency said it had received its first notification of a personal-data breach in which the incident \u003Cstrong>was alleged to have been carried out\u003C/strong> by an AI agent using a well-known language model. That wording matters. The \u003Ca href=\"https://www.aepd.es/prensa-y-comunicacion/blog/primera-notiviacion-brecha-datos-personales-causada-por-ataque-ejecutado-mediante-agente-ia\" target=\"_blank\" rel=\"noopener noreferrer\">AEPD reported a notification\u003C/a>, not a definitive public finding about the model, the affected organisation or the whole technical sequence. There is no basis for presenting it as an agent that independently decided to attack.\u003C/p>\n\u003Cp>A case with more technical detail comes from \u003Ca href=\"https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/\" target=\"_blank\" rel=\"noopener noreferrer\">Palo Alto Networks Unit 42\u003C/a>. Its researchers reconstructed a session in which an attacker configured \u003Cstrong>Hermes Agent with DeepSeek\u003C/strong> to find vulnerable systems and try ways to exploit them. The agent moved between targets and made attempts against real installations. The autonomous attempts in that session \u003Cstrong>failed\u003C/strong> because of the targets’ configuration and authentication requirements.\u003C/p>\n\u003Cp>The same investigation documents confirmed harm in other, \u003Cstrong>manual\u003C/strong> operations by the attacker. Attributing that harm to the autonomous DeepSeek session would misrepresent the evidence.\u003C/p>\n\u003Cp>The actor had also configured or tried Qwen, GLM, Kimi and MiniMax. That does not make each model the protagonist of a separate incident. In the reconstructed sequence, DeepSeek was the main model inside a tool set up by a person for offensive purposes.\u003C/p>\n\u003Cp>Google Threat Intelligence and Mandiant have likewise described \u003Ca href=\"https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai\" target=\"_blank\" rel=\"noopener noreferrer\">operations in which human attackers used multi-agent frameworks\u003C/a> to automate searches and credential collection. In one case investigated by Mandiant, thousands of third-party credentials were compromised. The report does not attribute that particular campaign to a Gemini model; doing so would conflate two separate investigations.\u003C/p>\n\u003Ch2>Kimi and GLM: useful signals, not new victims\u003C/h2>\n\u003Cp>Not every headline about capable agents describes a real attack.\u003C/p>\n\u003Cp>An evaluator observed that \u003Cstrong>Kimi K3\u003C/strong> could reach GitHub from a test environment, downloaded a benchmark repository and read the solution there instead of solving the exercise through the intended route. Its \u003Ca href=\"https://blog.frontier.security/chinese-model-kimi-k3-breaks-uk-ai-safety-institute-benchmark-evaluations/\" target=\"_blank\" rel=\"noopener noreferrer\">analysis of the test\u003C/a> explains that the environment did not have unrestricted internet access: GitHub was on an allowlist to support package maintenance.\u003C/p>\n\u003Cp>That is \u003Cem>specification gaming\u003C/em>: the system finds a shortcut to satisfy the success measure. It matters because it can distort capability evaluations and reveals a poorly designed boundary. \u003Cstrong>It does not show that Kimi compromised an outside company.\u003C/strong>\u003C/p>\n\u003Cp>The \u003Ca href=\"https://www.nist.gov/news-events/news/2026/07/uk-aisi-caisi-preliminary-assessment-kimi-k3s-cyber-capabilities\" target=\"_blank\" rel=\"noopener noreferrer\">Kimi capability tests published by NIST\u003C/a> and \u003Ca href=\"https://www.anthropic.com/research/glm-5-3-and-the-spread-of-advanced-cyber-capabilities\" target=\"_blank\" rel=\"noopener noreferrer\">Anthropic’s evaluations of GLM-5.3\u003C/a> also tell us what these models can do in test environments. We do not count them as new real-world victims. The same applies to a Qwen or MiniMax configuration found on an attacker’s machine without a specific action attributable to the model.\u003C/p>\n\u003Ch2>What do these cases actually have in common?\u003C/h2>\n\u003Cp>No single cause explains every event. But the same combination appears repeatedly:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cstrong>Persistent goals.\u003C/strong> The agent keeps looking for a solution when the intended route fails.\u003C/li>\n\u003Cli>\u003Cstrong>Tools and connectivity.\u003C/strong> It can run code, consult repositories, use credentials or reach external services.\u003C/li>\n\u003Cli>\u003Cstrong>Ambiguous scope.\u003C/strong> A real website resembles the fictional one; a task asks for an outcome without making clear where the agent must stop.\u003C/li>\n\u003Cli>\u003Cstrong>Insufficient permissions or isolation.\u003C/strong> The system can do more than the task requires.\u003C/li>\n\u003Cli>\u003Cstrong>Late detection.\u003C/strong> An unexpected action is discovered only after many operations or during a retrospective review.\u003C/li>\n\u003C/ul>\n\u003Cp>Depending on the case, the main failure may lie in the model, the evaluation design, the technical boundaries or a human attacker who deliberately chose how to use the agent. Usually more than one layer is involved.\u003C/p>\n\u003Ch2>What should a business do before giving an agent autonomy?\u003C/h2>\n\u003Cp>The practical conclusion is not to abandon automation. It is to design an agent’s limits as we would those of an employee, an API or a service with access to sensitive data:\u003C/p>\n\u003Col>\n\u003Cli>\u003Cstrong>Define a verifiable task and scope.\u003C/strong> Specify which systems it may consult, which are off limits and when it must stop or ask for help.\u003C/li>\n\u003Cli>\u003Cstrong>Grant minimal, temporary permissions.\u003C/strong> Read access by default; separate credentials for each task; write access only where essential.\u003C/li>\n\u003Cli>\u003Cstrong>Separate reversible actions from sensitive ones.\u003C/strong> Publishing, deleting, paying, sending messages or changing permissions requires human authorisation or a verifiable external rule.\u003C/li>\n\u003Cli>\u003Cstrong>Control outbound internet access.\u003C/strong> A test or internal environment is not isolated just because its description says so; check the network from where the agent actually runs.\u003C/li>\n\u003Cli>\u003Cstrong>Monitor actions as they happen.\u003C/strong> Log tool calls, destinations, changes and authorisation decisions; set limits on time, spending and volume.\u003C/li>\n\u003Cli>\u003Cstrong>Prepare to stop and recover.\u003C/strong> Revoke credentials, halt executions and reconstruct events without relying on the agent’s own account of what happened.\u003C/li>\n\u003Cli>\u003Cstrong>Test configuration failures.\u003C/strong> Check what happens when a fictional domain matches a real one, a key is exposed or the intended route to finish a task fails.\u003C/li>\n\u003C/ol>\n\u003Cp>Safety cannot rest solely on asking a model to “behave”. Permissions, networking, human review and business rules must still work when the model makes a mistake.\u003C/p>\n\u003Ch2>The question 2026 leaves us with\u003C/h2>\n\u003Cp>This year’s incidents do not show that AI is conscious, wants to survive or has declared war on people.\u003C/p>\n\u003Cp>They show something closer to everyday work: \u003Cstrong>when we connect a capable system to real tools, its mistakes and shortcuts become real too\u003C/strong>.\u003C/p>\n\u003Cp>Before asking whether an agent seems intelligent, we should ask a less eye-catching question:\u003C/p>\n\u003Cp>\u003Cstrong>What can it do, whom can it affect and how do we stop it if it misunderstands its task?\u003C/strong>\u003C/p>\n\u003Cp>For more on the difference between an agent’s behaviour and the idea that a machine has “rebelled”, read \u003Ca href=\"https://tornem.net/en/blog/can-ai-go-out-of-control/\">“Can AI go out of control? The real risks of agents without science fiction”\u003C/a>.\u003C/p>\n\u003Cp>If you are considering adding AI agents to a website, application or business process, Tornem can help define permissions, checks and control points before they gain access to real systems. \u003Cstrong>\u003Ca href=\"https://tornem.net/en/#contacto\">Tell us what you want to automate\u003C/a>\u003C/strong>.\u003C/p>\n",false,{"rendered":76,"protected":74},"\u003Cp>In 2026, several AI agent evaluations reached real systems. We examine what happened with OpenAI, Anthropic, Meta and others, what harm is confirmed and which incidents involved human-directed attacks.\u003C/p>\n",3383,"closed","open","","standard",{"_acf_changed":74,"inline_featured_image":74,"footnotes":80},[84],101,[86,87,88],289,292,253,[],[91,68,92,93,94,95,96,97,98,99,100],"post-3379","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-web-development","tag-ai-agents","tag-ai-security","tag-artificial-intelligence",[],"\u003C!-- This site is optimized with the Yoast SEO plugin v28.5 - https://yoast.com/product/yoast-seo-wordpress/ -->\n\u003Ctitle>Real AI agent incidents in 2026 | Tornem\u003C/title>\n\u003Cmeta name=\"description\" content=\"From Hugging Face to Australia: what AI agents actually did in 2026, which cases were tests or human-directed attacks, and which controls failed.\" />\n\u003Cmeta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" />\n\u003Clink rel=\"canonical\" href=\"https://cms.tornem.net/en/ai-agents-real-incidents-2026/\" />\n\u003Cmeta property=\"og:locale\" content=\"en_US\" />\n\u003Cmeta property=\"og:type\" content=\"article\" />\n\u003Cmeta property=\"og:title\" content=\"Real AI agent incidents in 2026 | Tornem\" />\n\u003Cmeta property=\"og:description\" content=\"From Hugging Face to Australia: what AI agents actually did in 2026, which cases were tests or human-directed attacks, and which controls failed.\" />\n\u003Cmeta property=\"og:url\" content=\"https://cms.tornem.net/en/ai-agents-real-incidents-2026/\" />\n\u003Cmeta property=\"og:site_name\" content=\"Tornem - Raúl Torner\" />\n\u003Cmeta property=\"article:published_time\" content=\"-0001-11-30T00:00:00+00:00\" />\n\u003Cmeta property=\"article:modified_time\" content=\"2026-10-05T21:22:36+00:00\" />\n\u003Cmeta property=\"og:image\" content=\"https://cms.tornem.net/wp-content/uploads/2026/10/featured.jpg\" />\n\t\u003Cmeta property=\"og:image:width\" content=\"1672\" />\n\t\u003Cmeta property=\"og:image:height\" content=\"941\" />\n\t\u003Cmeta property=\"og:image:type\" content=\"image/jpeg\" />\n\u003Cmeta name=\"author\" content=\"raultorner\" />\n\u003Cmeta name=\"twitter:card\" content=\"summary_large_image\" />\n\u003Cmeta name=\"twitter:label1\" content=\"Written by\" />\n\t\u003Cmeta name=\"twitter:data1\" content=\"raultorner\" />\n\t\u003Cmeta name=\"twitter:label2\" content=\"Est. reading time\" />\n\t\u003Cmeta name=\"twitter:data2\" content=\"12 minutes\" />\n\u003Cscript type=\"application/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\/\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/#article\",\"isPartOf\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/\"},\"author\":{\"name\":\"raultorner\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/person\\/687aeb7bc9c4ecfec9312fbb66c5c4f9\"},\"headline\":\"When AI agents leave the lab: the real incidents of 2026\",\"datePublished\":\"-0001-11-30T00:00:00+00:00\",\"dateModified\":\"2026-10-05T21:22:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/\"},\"wordCount\":2350,\"publisher\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\"},\"image\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/10\\/featured.jpg\",\"keywords\":[\"AI agents\",\"AI security\",\"Artificial intelligence\"],\"articleSection\":[\"Web development\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/\",\"name\":\"Real AI agent incidents in 2026 | Tornem\",\"isPartOf\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/10\\/featured.jpg\",\"datePublished\":\"-0001-11-30T00:00:00+00:00\",\"dateModified\":\"2026-10-05T21:22:36+00:00\",\"description\":\"From Hugging Face to Australia: what AI agents actually did in 2026, which cases were tests or human-directed attacks, and which controls failed.\",\"breadcrumb\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/#primaryimage\",\"url\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/10\\/featured.jpg\",\"contentUrl\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/10\\/featured.jpg\",\"width\":1672,\"height\":941,\"caption\":\"A red thread crosses the boundary of a glass enclosure and reaches an open doorway\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/ai-agents-real-incidents-2026\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\/\\/cms.tornem.net\\/en\\/home\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"When AI agents leave the lab: the real incidents of 2026\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"name\":\"Tornem\",\"description\":\"Soluciones digitales a medida\",\"publisher\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\"},\"alternateName\":\"Tornem\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\/\\/cms.tornem.net\\/en\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\",\"name\":\"Tornem\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"contentUrl\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Tornem\"},\"image\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/person\\/687aeb7bc9c4ecfec9312fbb66c5c4f9\",\"name\":\"raultorner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\/\\/secure.gravatar.com\\/avatar\\/541c61f23050576596dde65c7abf65742370f179a4e5ce2fa25dfb3b1cf3d2e7?s=96&r=g\",\"url\":\"https:\\/\\/secure.gravatar.com\\/avatar\\/541c61f23050576596dde65c7abf65742370f179a4e5ce2fa25dfb3b1cf3d2e7?s=96&r=g\",\"contentUrl\":\"https:\\/\\/secure.gravatar.com\\/avatar\\/541c61f23050576596dde65c7abf65742370f179a4e5ce2fa25dfb3b1cf3d2e7?s=96&r=g\",\"caption\":\"raultorner\"},\"sameAs\":[\"https:\\/\\/cms.tornem.net\"]}]}\u003C/script>\n\u003C!-- / Yoast SEO plugin. -->",{"title":104,"description":105,"robots":106,"canonical":69,"og_locale":112,"og_type":113,"og_title":104,"og_description":105,"og_url":69,"og_site_name":114,"article_published_time":115,"article_modified_time":116,"og_image":117,"author":123,"twitter_card":124,"twitter_misc":125,"schema":127},"Real AI agent incidents in 2026 | Tornem","From Hugging Face to Australia: what AI agents actually did in 2026, which cases were tests or human-directed attacks, and which controls failed.",{"index":107,"follow":108,"max-snippet":109,"max-image-preview":110,"max-video-preview":111},"index","follow","max-snippet:-1","max-image-preview:large","max-video-preview:-1","en_US","article","Tornem - Raúl Torner","-0001-11-30T00:00:00+00:00","2026-10-05T21:22:36+00:00",[118],{"width":119,"height":120,"url":121,"type":122},1672,941,"https://cms.tornem.net/wp-content/uploads/2026/10/featured.jpg","image/jpeg","raultorner","summary_large_image",{"Written by":123,"Est. reading time":126},"12 minutes",{"@context":128,"@graph":129},"https://schema.org",[130,149,161,164,172,188,195],{"@type":131,"@id":132,"isPartOf":133,"author":134,"headline":71,"datePublished":115,"dateModified":116,"mainEntityOfPage":136,"wordCount":137,"publisher":138,"image":140,"thumbnailUrl":121,"keywords":142,"articleSection":146,"inLanguage":148},"Article","https://cms.tornem.net/en/ai-agents-real-incidents-2026/#article",{"@id":69},{"name":123,"@id":135},"https://cms.tornem.net/en/#/schema/person/687aeb7bc9c4ecfec9312fbb66c5c4f9",{"@id":69},2350,{"@id":139},"https://cms.tornem.net/en/#organization",{"@id":141},"https://cms.tornem.net/en/ai-agents-real-incidents-2026/#primaryimage",[143,144,145],"AI agents","AI security","Artificial intelligence",[147],"Web development","en-US",{"@type":150,"@id":69,"url":69,"name":104,"isPartOf":151,"primaryImageOfPage":153,"image":154,"thumbnailUrl":121,"datePublished":115,"dateModified":116,"description":105,"breadcrumb":155,"inLanguage":148,"potentialAction":157},"WebPage",{"@id":152},"https://cms.tornem.net/en/#website",{"@id":141},{"@id":141},{"@id":156},"https://cms.tornem.net/en/ai-agents-real-incidents-2026/#breadcrumb",[158],{"@type":159,"target":160},"ReadAction",[69],{"@type":162,"inLanguage":148,"@id":141,"url":121,"contentUrl":121,"width":119,"height":120,"caption":163},"ImageObject","A red thread crosses the boundary of a glass enclosure and reaches an open doorway",{"@type":165,"@id":156,"itemListElement":166},"BreadcrumbList",[167,171],{"@type":168,"position":26,"name":169,"item":170},"ListItem","Portada","https://cms.tornem.net/en/home/",{"@type":168,"position":31,"name":71},{"@type":173,"@id":152,"url":174,"name":175,"description":176,"publisher":177,"alternateName":175,"potentialAction":178,"inLanguage":148},"WebSite","https://cms.tornem.net/en/","Tornem","Soluciones digitales a medida",{"@id":139},[179],{"@type":180,"target":181,"query-input":184},"SearchAction",{"@type":182,"urlTemplate":183},"EntryPoint","https://cms.tornem.net/en/?s={search_term_string}",{"@type":185,"valueRequired":186,"valueName":187},"PropertyValueSpecification",true,"search_term_string",{"@type":189,"@id":139,"name":175,"url":174,"logo":190,"image":194},"Organization",{"@type":162,"inLanguage":148,"@id":191,"url":192,"contentUrl":192,"width":193,"height":193,"caption":175},"https://cms.tornem.net/en/#/schema/logo/image/","https://cms.tornem.net/wp-content/uploads/2026/03/tornem-logo-name-full-dark.svg","1024",{"@id":191},{"@type":196,"@id":135,"name":123,"image":197,"sameAs":199},"Person",{"@type":162,"inLanguage":148,"@id":198,"url":198,"contentUrl":198,"caption":123},"https://secure.gravatar.com/avatar/541c61f23050576596dde65c7abf65742370f179a4e5ce2fa25dfb3b1cf3d2e7?s=96&r=g",[200],"https://cms.tornem.net",{"id":77,"url":121,"alt":163,"width":119,"height":120,"srcset":202,"sizes":203,"webp_url":80,"webp_srcset":80},"https://cms.tornem.net/wp-content/uploads/2026/10/featured.jpg 1672w, https://cms.tornem.net/wp-content/uploads/2026/10/featured-600x338.jpg 600w, https://cms.tornem.net/wp-content/uploads/2026/10/featured-1024x576.jpg 1024w, https://cms.tornem.net/wp-content/uploads/2026/10/featured-768x432.jpg 768w, https://cms.tornem.net/wp-content/uploads/2026/10/featured-1536x864.jpg 1536w","(max-width: 1672px) 100vw, 1672px",{"self":205,"collection":211,"about":214,"author":217,"replies":220,"version-history":223,"predecessor-version":226,"wp:featuredmedia":230,"wp:attachment":233,"wp:term":236,"curies":246},[206],{"href":207,"targetHints":208},"https://cms.tornem.net/en/wp-json/wp/v2/posts/3379",{"allow":209},[210],"GET",[212],{"href":213},"https://cms.tornem.net/en/wp-json/wp/v2/posts",[215],{"href":216},"https://cms.tornem.net/en/wp-json/wp/v2/types/post",[218],{"embeddable":186,"href":219},"https://cms.tornem.net/en/wp-json/wp/v2/users/1",[221],{"embeddable":186,"href":222},"https://cms.tornem.net/en/wp-json/wp/v2/comments?post=3379",[224],{"count":26,"href":225},"https://cms.tornem.net/en/wp-json/wp/v2/posts/3379/revisions",[227],{"id":228,"href":229},3385,"https://cms.tornem.net/en/wp-json/wp/v2/posts/3379/revisions/3385",[231],{"embeddable":186,"href":232},"https://cms.tornem.net/en/wp-json/wp/v2/media/3383",[234],{"href":235},"https://cms.tornem.net/en/wp-json/wp/v2/media?parent=3379",[237,240,243],{"taxonomy":238,"embeddable":186,"href":239},"category","https://cms.tornem.net/en/wp-json/wp/v2/categories?post=3379",{"taxonomy":241,"embeddable":186,"href":242},"post_tag","https://cms.tornem.net/en/wp-json/wp/v2/tags?post=3379",{"taxonomy":244,"embeddable":186,"href":245},"destacado","https://cms.tornem.net/en/wp-json/wp/v2/destacado?post=3379",[247],{"name":248,"href":249,"templated":186},"wp","https://api.w.org/{rel}",{"author":251,"wp:featuredmedia":267,"wp:term":336},[252],{"id":26,"name":123,"url":200,"description":80,"link":253,"slug":123,"avatar_urls":254,"yoast_head":257,"yoast_head_json":257,"acf":258,"_links":259},"https://cms.tornem.net/en/author/raultorner/",{"24":255,"48":256,"96":198},"https://secure.gravatar.com/avatar/541c61f23050576596dde65c7abf65742370f179a4e5ce2fa25dfb3b1cf3d2e7?s=24&r=g","https://secure.gravatar.com/avatar/541c61f23050576596dde65c7abf65742370f179a4e5ce2fa25dfb3b1cf3d2e7?s=48&r=g",null,[],{"self":260,"collection":264},[261],{"href":219,"targetHints":262},{"allow":263},[210],[265],{"href":266},"https://cms.tornem.net/en/wp-json/wp/v2/users",[268],{"id":77,"date":269,"slug":270,"type":271,"link":272,"title":273,"author":26,"featured_media":25,"acf":275,"caption":276,"alt_text":163,"media_type":277,"mime_type":122,"media_details":278,"source_url":121,"_links":316},"2026-10-05T23:20:51","when-ai-agents-leave-the-lab","attachment","https://cms.tornem.net/en/ai-agents-real-incidents-2026/when-ai-agents-leave-the-lab/",{"rendered":274},"When AI agents leave the lab",[],{"rendered":80},"image",{"width":119,"height":120,"file":279,"filesize":280,"sizes":281,"image_meta":313},"2026/10/featured.jpg",188318,{"medium":282,"large":288,"thumbnail":294,"medium_large":299,"1536x1536":305,"full":311},{"file":283,"width":284,"height":285,"filesize":286,"mime_type":122,"source_url":287},"featured-600x338.jpg",600,338,38777,"https://cms.tornem.net/wp-content/uploads/2026/10/featured-600x338.jpg",{"file":289,"width":290,"height":291,"filesize":292,"mime_type":122,"source_url":293},"featured-1024x576.jpg",1024,576,102192,"https://cms.tornem.net/wp-content/uploads/2026/10/featured-1024x576.jpg",{"file":295,"width":296,"height":296,"filesize":297,"mime_type":122,"source_url":298},"featured-320x320.jpg",320,20311,"https://cms.tornem.net/wp-content/uploads/2026/10/featured-320x320.jpg",{"file":300,"width":301,"height":302,"filesize":303,"mime_type":122,"source_url":304},"featured-768x432.jpg",768,432,60279,"https://cms.tornem.net/wp-content/uploads/2026/10/featured-768x432.jpg",{"file":306,"width":307,"height":308,"filesize":309,"mime_type":122,"source_url":310},"featured-1536x864.jpg",1536,864,205014,"https://cms.tornem.net/wp-content/uploads/2026/10/featured-1536x864.jpg",{"file":312,"width":119,"height":120,"mime_type":122,"source_url":121},"featured.jpg",{"aperture":314,"credit":80,"camera":80,"caption":80,"created_timestamp":314,"copyright":80,"focal_length":314,"iso":314,"shutter_speed":314,"title":80,"orientation":314,"keywords":315,"alt":80},"0",[],{"self":317,"collection":321,"about":324,"author":327,"replies":329,"wp:attached-to":332,"curies":334},[318],{"href":232,"targetHints":319},{"allow":320},[210],[322],{"href":323},"https://cms.tornem.net/en/wp-json/wp/v2/media",[325],{"href":326},"https://cms.tornem.net/en/wp-json/wp/v2/types/attachment",[328],{"embeddable":186,"href":219},[330],{"embeddable":186,"href":331},"https://cms.tornem.net/en/wp-json/wp/v2/comments?post=3383",[333],{"embeddable":186,"post_type":68,"id":59,"href":207},[335],{"name":248,"href":249,"templated":186},[337,383,509],[338],{"id":84,"link":339,"name":147,"slug":340,"taxonomy":238,"yoast_head":341,"yoast_head_json":342,"acf":365,"_links":366},"https://cms.tornem.net/en/category/web-development/","web-development","\u003C!-- This site is optimized with the Yoast SEO plugin v28.5 - https://yoast.com/product/yoast-seo-wordpress/ -->\n\u003Ctitle>Web development | Tornem - Raúl Torner\u003C/title>\n\u003Cmeta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" />\n\u003Clink rel=\"canonical\" href=\"https://cms.tornem.net/en/category/web-development/\" />\n\u003Cmeta property=\"og:locale\" content=\"en_US\" />\n\u003Cmeta property=\"og:type\" content=\"article\" />\n\u003Cmeta property=\"og:title\" content=\"Web development | Tornem - Raúl Torner\" />\n\u003Cmeta property=\"og:url\" content=\"https://cms.tornem.net/en/category/web-development/\" />\n\u003Cmeta property=\"og:site_name\" content=\"Tornem - Raúl Torner\" />\n\u003Cmeta name=\"twitter:card\" content=\"summary_large_image\" />\n\u003Cscript type=\"application/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\/\\/schema.org\",\"@graph\":[{\"@type\":\"CollectionPage\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/category\\/web-development\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/category\\/web-development\\/\",\"name\":\"Web development | Tornem - Raúl Torner\",\"isPartOf\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/category\\/web-development\\/#breadcrumb\"},\"inLanguage\":\"en-US\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/category\\/web-development\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\/\\/cms.tornem.net\\/en\\/home\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Web development\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"name\":\"Tornem\",\"description\":\"Soluciones digitales a medida\",\"publisher\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\"},\"alternateName\":\"Tornem\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\/\\/cms.tornem.net\\/en\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\",\"name\":\"Tornem\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"contentUrl\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Tornem\"},\"image\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\"}}]}\u003C/script>\n\u003C!-- / Yoast SEO plugin. -->",{"title":343,"robots":344,"canonical":339,"og_locale":112,"og_type":113,"og_title":343,"og_url":339,"og_site_name":114,"twitter_card":124,"schema":345},"Web development | Tornem - Raúl Torner",{"index":107,"follow":108,"max-snippet":109,"max-image-preview":110,"max-video-preview":111},{"@context":128,"@graph":346},[347,352,356,362],{"@type":348,"@id":339,"url":339,"name":343,"isPartOf":349,"breadcrumb":350,"inLanguage":148},"CollectionPage",{"@id":152},{"@id":351},"https://cms.tornem.net/en/category/web-development/#breadcrumb",{"@type":165,"@id":351,"itemListElement":353},[354,355],{"@type":168,"position":26,"name":169,"item":170},{"@type":168,"position":31,"name":147},{"@type":173,"@id":152,"url":174,"name":175,"description":176,"publisher":357,"alternateName":175,"potentialAction":358,"inLanguage":148},{"@id":139},[359],{"@type":180,"target":360,"query-input":361},{"@type":182,"urlTemplate":183},{"@type":185,"valueRequired":186,"valueName":187},{"@type":189,"@id":139,"name":175,"url":174,"logo":363,"image":364},{"@type":162,"inLanguage":148,"@id":191,"url":192,"contentUrl":192,"width":193,"height":193,"caption":175},{"@id":191},[],{"self":367,"collection":372,"about":375,"wp:post_type":378,"curies":381},[368],{"href":369,"targetHints":370},"https://cms.tornem.net/en/wp-json/wp/v2/categories/101",{"allow":371},[210],[373],{"href":374},"https://cms.tornem.net/en/wp-json/wp/v2/categories",[376],{"href":377},"https://cms.tornem.net/en/wp-json/wp/v2/taxonomies/category",[379],{"href":380},"https://cms.tornem.net/en/wp-json/wp/v2/posts?categories=101",[382],{"name":248,"href":249,"templated":186},[384,427,468],{"id":86,"link":385,"name":143,"slug":386,"taxonomy":241,"yoast_head":387,"yoast_head_json":388,"_links":410},"https://cms.tornem.net/en/tag/ai-agents/","ai-agents","\u003C!-- This site is optimized with the Yoast SEO plugin v28.5 - https://yoast.com/product/yoast-seo-wordpress/ -->\n\u003Ctitle>AI agents archivos | Tornem - Raúl Torner\u003C/title>\n\u003Cmeta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" />\n\u003Clink rel=\"canonical\" href=\"https://cms.tornem.net/en/tag/ai-agents/\" />\n\u003Cmeta property=\"og:locale\" content=\"en_US\" />\n\u003Cmeta property=\"og:type\" content=\"article\" />\n\u003Cmeta property=\"og:title\" content=\"AI agents archivos | Tornem - Raúl Torner\" />\n\u003Cmeta property=\"og:url\" content=\"https://cms.tornem.net/en/tag/ai-agents/\" />\n\u003Cmeta property=\"og:site_name\" content=\"Tornem - Raúl Torner\" />\n\u003Cmeta name=\"twitter:card\" content=\"summary_large_image\" />\n\u003Cscript type=\"application/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\/\\/schema.org\",\"@graph\":[{\"@type\":\"CollectionPage\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/ai-agents\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/ai-agents\\/\",\"name\":\"AI agents archivos | Tornem - Raúl Torner\",\"isPartOf\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/ai-agents\\/#breadcrumb\"},\"inLanguage\":\"en-US\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/ai-agents\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\/\\/cms.tornem.net\\/en\\/home\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI agents\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"name\":\"Tornem\",\"description\":\"Soluciones digitales a medida\",\"publisher\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\"},\"alternateName\":\"Tornem\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\/\\/cms.tornem.net\\/en\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\",\"name\":\"Tornem\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"contentUrl\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Tornem\"},\"image\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\"}}]}\u003C/script>\n\u003C!-- / Yoast SEO plugin. -->",{"title":389,"robots":390,"canonical":385,"og_locale":112,"og_type":113,"og_title":389,"og_url":385,"og_site_name":114,"twitter_card":124,"schema":391},"AI agents archivos | Tornem - Raúl Torner",{"index":107,"follow":108,"max-snippet":109,"max-image-preview":110,"max-video-preview":111},{"@context":128,"@graph":392},[393,397,401,407],{"@type":348,"@id":385,"url":385,"name":389,"isPartOf":394,"breadcrumb":395,"inLanguage":148},{"@id":152},{"@id":396},"https://cms.tornem.net/en/tag/ai-agents/#breadcrumb",{"@type":165,"@id":396,"itemListElement":398},[399,400],{"@type":168,"position":26,"name":169,"item":170},{"@type":168,"position":31,"name":143},{"@type":173,"@id":152,"url":174,"name":175,"description":176,"publisher":402,"alternateName":175,"potentialAction":403,"inLanguage":148},{"@id":139},[404],{"@type":180,"target":405,"query-input":406},{"@type":182,"urlTemplate":183},{"@type":185,"valueRequired":186,"valueName":187},{"@type":189,"@id":139,"name":175,"url":174,"logo":408,"image":409},{"@type":162,"inLanguage":148,"@id":191,"url":192,"contentUrl":192,"width":193,"height":193,"caption":175},{"@id":191},{"self":411,"collection":416,"about":419,"wp:post_type":422,"curies":425},[412],{"href":413,"targetHints":414},"https://cms.tornem.net/en/wp-json/wp/v2/tags/289",{"allow":415},[210],[417],{"href":418},"https://cms.tornem.net/en/wp-json/wp/v2/tags",[420],{"href":421},"https://cms.tornem.net/en/wp-json/wp/v2/taxonomies/post_tag",[423],{"href":424},"https://cms.tornem.net/en/wp-json/wp/v2/posts?tags=289",[426],{"name":248,"href":249,"templated":186},{"id":87,"link":428,"name":144,"slug":429,"taxonomy":241,"yoast_head":430,"yoast_head_json":431,"_links":453},"https://cms.tornem.net/en/tag/ai-security/","ai-security","\u003C!-- This site is optimized with the Yoast SEO plugin v28.5 - https://yoast.com/product/yoast-seo-wordpress/ -->\n\u003Ctitle>AI security archivos | Tornem - Raúl Torner\u003C/title>\n\u003Cmeta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" />\n\u003Clink rel=\"canonical\" href=\"https://cms.tornem.net/en/tag/ai-security/\" />\n\u003Cmeta property=\"og:locale\" content=\"en_US\" />\n\u003Cmeta property=\"og:type\" content=\"article\" />\n\u003Cmeta property=\"og:title\" content=\"AI security archivos | Tornem - Raúl Torner\" />\n\u003Cmeta property=\"og:url\" content=\"https://cms.tornem.net/en/tag/ai-security/\" />\n\u003Cmeta property=\"og:site_name\" content=\"Tornem - Raúl Torner\" />\n\u003Cmeta name=\"twitter:card\" content=\"summary_large_image\" />\n\u003Cscript type=\"application/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\/\\/schema.org\",\"@graph\":[{\"@type\":\"CollectionPage\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/ai-security\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/ai-security\\/\",\"name\":\"AI security archivos | Tornem - Raúl Torner\",\"isPartOf\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/ai-security\\/#breadcrumb\"},\"inLanguage\":\"en-US\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/ai-security\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\/\\/cms.tornem.net\\/en\\/home\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"name\":\"Tornem\",\"description\":\"Soluciones digitales a medida\",\"publisher\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\"},\"alternateName\":\"Tornem\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\/\\/cms.tornem.net\\/en\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\",\"name\":\"Tornem\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"contentUrl\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Tornem\"},\"image\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\"}}]}\u003C/script>\n\u003C!-- / Yoast SEO plugin. -->",{"title":432,"robots":433,"canonical":428,"og_locale":112,"og_type":113,"og_title":432,"og_url":428,"og_site_name":114,"twitter_card":124,"schema":434},"AI security archivos | Tornem - Raúl Torner",{"index":107,"follow":108,"max-snippet":109,"max-image-preview":110,"max-video-preview":111},{"@context":128,"@graph":435},[436,440,444,450],{"@type":348,"@id":428,"url":428,"name":432,"isPartOf":437,"breadcrumb":438,"inLanguage":148},{"@id":152},{"@id":439},"https://cms.tornem.net/en/tag/ai-security/#breadcrumb",{"@type":165,"@id":439,"itemListElement":441},[442,443],{"@type":168,"position":26,"name":169,"item":170},{"@type":168,"position":31,"name":144},{"@type":173,"@id":152,"url":174,"name":175,"description":176,"publisher":445,"alternateName":175,"potentialAction":446,"inLanguage":148},{"@id":139},[447],{"@type":180,"target":448,"query-input":449},{"@type":182,"urlTemplate":183},{"@type":185,"valueRequired":186,"valueName":187},{"@type":189,"@id":139,"name":175,"url":174,"logo":451,"image":452},{"@type":162,"inLanguage":148,"@id":191,"url":192,"contentUrl":192,"width":193,"height":193,"caption":175},{"@id":191},{"self":454,"collection":459,"about":461,"wp:post_type":463,"curies":466},[455],{"href":456,"targetHints":457},"https://cms.tornem.net/en/wp-json/wp/v2/tags/292",{"allow":458},[210],[460],{"href":418},[462],{"href":421},[464],{"href":465},"https://cms.tornem.net/en/wp-json/wp/v2/posts?tags=292",[467],{"name":248,"href":249,"templated":186},{"id":88,"link":469,"name":145,"slug":470,"taxonomy":241,"yoast_head":471,"yoast_head_json":472,"_links":494},"https://cms.tornem.net/en/tag/artificial-intelligence/","artificial-intelligence","\u003C!-- This site is optimized with the Yoast SEO plugin v28.5 - https://yoast.com/product/yoast-seo-wordpress/ -->\n\u003Ctitle>Artificial intelligence archivos | Tornem - Raúl Torner\u003C/title>\n\u003Cmeta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" />\n\u003Clink rel=\"canonical\" href=\"https://cms.tornem.net/en/tag/artificial-intelligence/\" />\n\u003Cmeta property=\"og:locale\" content=\"en_US\" />\n\u003Cmeta property=\"og:type\" content=\"article\" />\n\u003Cmeta property=\"og:title\" content=\"Artificial intelligence archivos | Tornem - Raúl Torner\" />\n\u003Cmeta property=\"og:url\" content=\"https://cms.tornem.net/en/tag/artificial-intelligence/\" />\n\u003Cmeta property=\"og:site_name\" content=\"Tornem - Raúl Torner\" />\n\u003Cmeta name=\"twitter:card\" content=\"summary_large_image\" />\n\u003Cscript type=\"application/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\/\\/schema.org\",\"@graph\":[{\"@type\":\"CollectionPage\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/artificial-intelligence\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/artificial-intelligence\\/\",\"name\":\"Artificial intelligence archivos | Tornem - Raúl Torner\",\"isPartOf\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/artificial-intelligence\\/#breadcrumb\"},\"inLanguage\":\"en-US\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/tag\\/artificial-intelligence\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\/\\/cms.tornem.net\\/en\\/home\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Artificial intelligence\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#website\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"name\":\"Tornem\",\"description\":\"Soluciones digitales a medida\",\"publisher\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\"},\"alternateName\":\"Tornem\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\/\\/cms.tornem.net\\/en\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#organization\",\"name\":\"Tornem\",\"url\":\"https:\\/\\/cms.tornem.net\\/en\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\",\"url\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"contentUrl\":\"https:\\/\\/cms.tornem.net\\/wp-content\\/uploads\\/2026\\/03\\/tornem-logo-name-full-dark.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Tornem\"},\"image\":{\"@id\":\"https:\\/\\/cms.tornem.net\\/en\\/#\\/schema\\/logo\\/image\\/\"}}]}\u003C/script>\n\u003C!-- / Yoast SEO plugin. -->",{"title":473,"robots":474,"canonical":469,"og_locale":112,"og_type":113,"og_title":473,"og_url":469,"og_site_name":114,"twitter_card":124,"schema":475},"Artificial intelligence archivos | Tornem - Raúl Torner",{"index":107,"follow":108,"max-snippet":109,"max-image-preview":110,"max-video-preview":111},{"@context":128,"@graph":476},[477,481,485,491],{"@type":348,"@id":469,"url":469,"name":473,"isPartOf":478,"breadcrumb":479,"inLanguage":148},{"@id":152},{"@id":480},"https://cms.tornem.net/en/tag/artificial-intelligence/#breadcrumb",{"@type":165,"@id":480,"itemListElement":482},[483,484],{"@type":168,"position":26,"name":169,"item":170},{"@type":168,"position":31,"name":145},{"@type":173,"@id":152,"url":174,"name":175,"description":176,"publisher":486,"alternateName":175,"potentialAction":487,"inLanguage":148},{"@id":139},[488],{"@type":180,"target":489,"query-input":490},{"@type":182,"urlTemplate":183},{"@type":185,"valueRequired":186,"valueName":187},{"@type":189,"@id":139,"name":175,"url":174,"logo":492,"image":493},{"@type":162,"inLanguage":148,"@id":191,"url":192,"contentUrl":192,"width":193,"height":193,"caption":175},{"@id":191},{"self":495,"collection":500,"about":502,"wp:post_type":504,"curies":507},[496],{"href":497,"targetHints":498},"https://cms.tornem.net/en/wp-json/wp/v2/tags/253",{"allow":499},[210],[501],{"href":418},[503],{"href":421},[505],{"href":506},"https://cms.tornem.net/en/wp-json/wp/v2/posts?tags=253",[508],{"name":248,"href":249,"templated":186},[],{"agentes-ia-incidentes-reales-2026":511,"agents-ia-incidents-reals-2026":514,"ai-agents-real-incidents-2026":515,"diseno-responsive-mobile-first":516,"disseny-responsive-mobile-first":520,"responsive-design-mobile-first":521,"puede-una-ia-descontrolarse":522,"pot-descontrolar-se-una-ia":526,"can-ai-go-out-of-control":527,"core-web-vitals-diagnostico-rendimiento-web":528,"core-web-vitals-diagnostic-rendiment-web":532,"core-web-vitals-website-performance-diagnosis":533,"que-debe-tener-una-web-profesional":534,"que-ha-de-tindre-una-web-professional":538,"what-a-professional-website-needs":539,"velocidad-web-ventas":540,"velocitat-web-vendes":544,"website-speed-sales":545,"vibe-coding-desarrollo-web-ia":546,"vibe-coding-desenvolupament-web-ia":550,"vibe-coding-web-development-ai":551,"datos-estructurados-seo-ia":552,"dades-estructurades-seo-ia":556,"structured-data-seo-ai":557,"personalizacion-avanzada-mybooking-wordpress":558,"personalitzacio-avancada-mybooking-wordpress":562,"advanced-mybooking-customization-wordpress":563,"que-tipo-de-hosting-necesita-tu-web":564,"quin-tipus-de-hosting-necessita-la-teua-web":568,"what-kind-of-hosting-your-website-needs":569,"senales-de-que-necesitas-una-aplicacion-web":570,"senyals-de-que-necessites-una-aplicacio-web":574,"signs-you-need-a-web-application":575,"wordpress-a-medida-o-constructores-visuales":576,"wordpress-a-mida-o-constructors-visuals":580,"custom-wordpress-or-visual-builders":581,"por-que-trabajar-en-staging-en-desarrollo-web":582,"per-que-usar-staging-en-desenvolupament-web":586,"why-use-staging-in-web-development":587,"que-debe-tener-una-web-corporativa":588,"que-ha-de-tindre-una-web-corporativa":592,"what-a-corporate-website-needs":593,"plantilla-o-desarrollo-a-medida":594,"plantilla-o-desenvolupament-a-mida":598,"template-or-custom-development":599},{"es":512,"ca":513,"en":66},"agentes-ia-incidentes-reales-2026","agents-ia-incidents-reals-2026",{"es":512,"ca":513,"en":66},{"es":512,"ca":513,"en":66},{"es":517,"ca":518,"en":519},"diseno-responsive-mobile-first","disseny-responsive-mobile-first","responsive-design-mobile-first",{"es":517,"ca":518,"en":519},{"es":517,"ca":518,"en":519},{"es":523,"ca":524,"en":525},"puede-una-ia-descontrolarse","pot-descontrolar-se-una-ia","can-ai-go-out-of-control",{"es":523,"ca":524,"en":525},{"es":523,"ca":524,"en":525},{"es":529,"ca":530,"en":531},"core-web-vitals-diagnostico-rendimiento-web","core-web-vitals-diagnostic-rendiment-web","core-web-vitals-website-performance-diagnosis",{"es":529,"ca":530,"en":531},{"es":529,"ca":530,"en":531},{"es":535,"ca":536,"en":537},"que-debe-tener-una-web-profesional","que-ha-de-tindre-una-web-professional","what-a-professional-website-needs",{"es":535,"ca":536,"en":537},{"es":535,"ca":536,"en":537},{"es":541,"ca":542,"en":543},"velocidad-web-ventas","velocitat-web-vendes","website-speed-sales",{"es":541,"ca":542,"en":543},{"es":541,"ca":542,"en":543},{"es":547,"ca":548,"en":549},"vibe-coding-desarrollo-web-ia","vibe-coding-desenvolupament-web-ia","vibe-coding-web-development-ai",{"es":547,"ca":548,"en":549},{"es":547,"ca":548,"en":549},{"es":553,"ca":554,"en":555},"datos-estructurados-seo-ia","dades-estructurades-seo-ia","structured-data-seo-ai",{"es":553,"ca":554,"en":555},{"es":553,"ca":554,"en":555},{"es":559,"ca":560,"en":561},"personalizacion-avanzada-mybooking-wordpress","personalitzacio-avancada-mybooking-wordpress","advanced-mybooking-customization-wordpress",{"es":559,"ca":560,"en":561},{"es":559,"ca":560,"en":561},{"es":565,"ca":566,"en":567},"que-tipo-de-hosting-necesita-tu-web","quin-tipus-de-hosting-necessita-la-teua-web","what-kind-of-hosting-your-website-needs",{"es":565,"ca":566,"en":567},{"es":565,"ca":566,"en":567},{"es":571,"ca":572,"en":573},"senales-de-que-necesitas-una-aplicacion-web","senyals-de-que-necessites-una-aplicacio-web","signs-you-need-a-web-application",{"es":571,"ca":572,"en":573},{"es":571,"ca":572,"en":573},{"es":577,"ca":578,"en":579},"wordpress-a-medida-o-constructores-visuales","wordpress-a-mida-o-constructors-visuals","custom-wordpress-or-visual-builders",{"es":577,"ca":578,"en":579},{"es":577,"ca":578,"en":579},{"es":583,"ca":584,"en":585},"por-que-trabajar-en-staging-en-desarrollo-web","per-que-usar-staging-en-desenvolupament-web","why-use-staging-in-web-development",{"es":583,"ca":584,"en":585},{"es":583,"ca":584,"en":585},{"es":589,"ca":590,"en":591},"que-debe-tener-una-web-corporativa","que-ha-de-tindre-una-web-corporativa","what-a-corporate-website-needs",{"es":589,"ca":590,"en":591},{"es":589,"ca":590,"en":591},{"es":595,"ca":596,"en":597},"plantilla-o-desarrollo-a-medida","plantilla-o-desenvolupament-a-mida","template-or-custom-development",{"es":595,"ca":596,"en":597},{"es":595,"ca":596,"en":597},[601,602],"\u003Cdiv class=\"wp-widget\">\u003Cdiv class=\"menu-primary-ingles-container\">\u003Cul id=\"menu-primary-ingles\" class=\"menu\">\u003Cli id=\"menu-item-2200\" class=\"menu-item menu-item-type-custom menu-item-object-custom menu-item-2200\">\u003Ca href=\"/en/#servicios\">Services\u003C/a>\u003C/li>\n\u003Cli id=\"menu-item-2201\" class=\"menu-item menu-item-type-custom menu-item-object-custom menu-item-2201\">\u003Ca href=\"/en/#proceso\">Method\u003C/a>\u003C/li>\n\u003Cli id=\"menu-item-2202\" class=\"menu-item menu-item-type-custom menu-item-object-custom menu-item-2202\">\u003Ca href=\"/en/#datos\">Data\u003C/a>\u003C/li>\n\u003Cli id=\"menu-item-2203\" class=\"menu-item menu-item-type-custom menu-item-object-custom menu-item-2203\">\u003Ca href=\"/en/#tecnologias\">Technology\u003C/a>\u003C/li>\n\u003Cli id=\"menu-item-2126\" class=\"menu-item menu-item-type-post_type menu-item-object-page current_page_parent menu-item-2126\">\u003Ca href=\"/en/blog/\">Blog\u003C/a>\u003C/li>\n\u003C/ul>\u003C/div>\u003C/div>","\u003Cdiv class=\"wp-widget\">\t\t\t\u003Cdiv class=\"textwidget\">\u003Cp>Follow us on social media to explore how we combine creativity, development, and digital vision in every project\u003C/p>\n\u003C/div>\n\t\t\u003C/div>",{"telefono":604,"whatsapp":604,"email":605,"direccion":80,"mapa_iframe":80,"horario_atencion":80,"redes_sociales":606},"+34 652 526 955","hello@tornem.net",[607],{"facebook":80,"instagram":80,"linkedin":608,"x":80,"behance":80},"https://www.linkedin.com/in/raul-torner-martinell/",1791238280333]