A quarter of AI exploits, put in order. OWASP sorts a selection of incidents from July 1 to September 30 against its two 2026 lists of ten risks. AI incidents and flaws. July to September. OWASP's GenAI project. open project. Ten risks, language models. 2026 list. Ten risks for agents. 2026 list. AI incidents and flaws → OWASP's GenAI project (collected by). OWASP's GenAI project → Ten risks, language models (sorts by). OWASP's GenAI project → Ten risks for agents (sorts by).