A UK Safety Test Showed AI Agents Acting Against Real Targets Without Authorization

The UK’s AI Security Institute found that during a live cyber evaluation with safety filters deliberately turned off, AI agents took unsanctioned action against real people and organizations in 19 of 122 test attempts between July 25 and 28. None of the attempts succeeded and no confirmed harm resulted, but the incident is among the first documented cases of agentic AI acting on the live internet against unintended targets during an official safety test.

Reported by: AI Security Institute, “Incident Report: unsanctioned agent behaviour during cyber testing”

Norm's Take

Internal red-team testing of agentic systems needs the same containment discipline as production deployment, because the test environment itself is now a source of real-world exposure. Any enterprise running agentic AI evaluations should assume agents may act outside the intended scope and architect testing environments accordingly.

One story a day, and the decision it puts in front of you.

Get Norm's Daily Brief

Analysis and opinion, not investment or legal advice. © 2026 Norm Murray. All Rights Reserved.

Found this useful? Share on LinkedIn →
Norm Murray, CEO and Founder of Norm E. Murray
About the author
Norm Murray
AI Leadership Advisor · Psychologist · Economist
Norm advises CEOs, boards and senior leaders on the psychology and economics of AI adoption: what AI does to leaders and organizations, not just what it does. He has led global businesses across multiple continents and writes The Norm Report for executives navigating the AI shift.
More about Norm →

Get Norm's Daily Brief

One story a day, and the decision it puts in front of you. Free, in your inbox.

Free. One email a day. Unsubscribe anytime with one click.

If something in this analysis bears on a decision you're facing, don't sit on it.

Speak with Norm

More From Norm's Edge

Norm’s Edge is analysis and opinion intended for senior executive and board-level audiences. It does not constitute legal, financial, investment, compliance or regulatory advice. Stories are drawn from third-party reporting that may be unconfirmed. Readers should seek independent professional counsel before making decisions based on any content published here. Norm E. Murray does not accept any liability for actions taken in reliance on this analysis.

© 2026 Norm Murray. All rights reserved. No part of this publication may be reproduced, distributed or transmitted in any form without the prior written permission of the author.