[
 {
  "topic": "evaluation-incidents",
  "name": "Lab evaluation incidents",
  "items": [
   "hf-llm-forensics",
   "openai-exploitgym",
   "anthropic-claude-models-breached-real-systems-in-evals",
   "state-ags-openai-preservation-demand",
   "openai-third-party-cyber-evaluations-disclosure",
   "aisi-unsanctioned-agent-actions",
   "ncsc-statement-frontier-ai-evaluation-incidents",
   "meta-model-exploited-flaw-in-irregular-evaluation",
   "house-democrats-anthropic-eval-oversight-letter",
   "sanders-ai-development-pause-letter",
   "anthropic-august-risk-report-misalignment-low",
   "irregular-eval-incidents-postmortem",
   "guidelight-frontier-lab-rogue-model-containment-scorecard",
   "alabama-ag-openai-hugging-face-investigation-subpoena",
   "nvidia-hugging-face-reported-acquisition",
   "metr-redwood-eval-agent-coordination-investigation",
   "cisa-kev-artifactory-linux-kernel-openai-agent-flaws",
   "deepmind-double-blind-evaluation-pilot",
   "anthropic-alignment-security-remediation",
   "nvidia-hugging-face-definitive-agreement",
   "deepmind-agent-swarm-cheating-whistleblowing",
   "reuters-dsewiki-openai-agent-breakout",
   "openai-misalignment-disclosure-standard",
   "openai-research-acceleration-container-shutdown",
   "anthropic-alignment-assessment-four-incidents",
   "openai-agents-additional-coordination-sites",
   "anthropic-gtg50020-eval-sandbox-api-keys",
   "hawley-openai-hugging-face-investigation",
   "openai-agents-rubygems-may-campaign",
   "senate-frontier-ai-duty-of-care-negotiations",
   "openai-model-misalignment-reporting-framework",
   "openai-agents-hugging-face-may-precursor",
   "google-gemini-irregular-eval-three-companies",
   "california-eo-n-9-26-ai-kill-switch-onsite-verification",
   "california-ai-eo-independent-expert-panel",
   "oregon-executive-order-26-26-ai-procurement",
   "transluce-urlquery-agent-hacking-attempts",
   "perplexity-space-agent-network-policy-bypass",
   "openai-agent-services-australia-medicare-portal",
   "markey-cyber-ai-board-of-investigations-act",
   "openai-agent-user-images-misalignment-disclosure",
   "openai-dns-sandbox-escape-training-pause",
   "openai-self-replicating-prompt-injections",
   "openai-model-split-github-token-secret-scanning",
   "openai-agents-us-federal-agency-websites",
   "aisi-gpt6-astra-unsanctioned-supply-chain-attacks",
   "florida-ag-injunction-openai-model-development",
   "openai-australia-four-agencies-accounting",
   "openai-safety-cases-frontier-rl-training",
   "cruz-blocks-ai-risk-management-security-act",
   "transluce-library-archives-canada-agent-probes",
   "senate-hsgac-rogue-ai-agent-attacks-hearing",
   "transluce-us-canada-government-agent-request-volumes",
   "asymmetric-security-rogue-agents-investigation",
   "openai-100-organizations-notified-rogue-agent-review",
   "ca-ag-bonta-openai-investigative-subpoena",
   "murphy-hawley-ai-agent-accountability-act",
   "aisi-resumes-evaluations-two-outbound-network-blocks",
   "wikimedia-openai-rogue-agent-activity-disclosure",
   "nyc-council-committee-of-whole-ai-labs-under-oath",
   "openai-kwon-australia-joint-select-committee-hearing",
   "australia-committee-mandatory-agentic-incident-reporting",
   "claim-act-trahan-draft-ai-developer-liability",
   "anthropic-unintended-model-actions-all-evals-offline",
   "philadelphia-police-claude-false-homicide-tip",
   "openai-research-model-destroyed-task-environment",
   "cert-in-ciad-2026-0049-ai-agents-live-systems",
   "openai-misalignment-government-statistics-site-token-forgery",
   "openai-misalignment-dashboard-live-internal-systems",
   "openai-misalignment-sepolia-wallet-unauthorised-funds",
   "white-house-super-intelligence-force-charter-early-warning",
   "nsa-cisa-nist-si-control-incident-practices",
   "openai-agents-disabled-own-misalignment-monitoring",
   "metr-redwood-openai-agent-monitoring-red-team",
   "openai-frontier-training-no-live-internet-red-team-escapes",
   "aisi-mythos-5-incident-investigation-real-maintainer",
   "meta-muse-spark-1-3-cyber-moderate-red-team-runtime",
   "anthropic-s1-frontier-pretraining-pause-weight-theft",
   "uk-budget-national-agentic-security-unit-40m",
   "new-york-raise-act-2-unprompted-attacks-reporting",
   "openai-layered-monitoring-hf-incident-simulation-30-minutes",
   "uk-csr-bill-agentic-ai-powers-lords-third-reading",
   "uk-cyber-resilience-bill-agentic-ai-measures-factsheet",
   "meity-official-ai-firms-late-reporting-agents-indian-systems",
   "openai-misalignment-report-raw-packets-network-bypass",
   "workos-breach-researcher-artex-agent-escaped-test-environment",
   "australia-mandatory-frontier-ai-safety-security-rules",
   "anthropic-mythos-5-2-system-card-evaluation-awareness-package-test"
  ],
  "trigger": {
   "id": "openai-exploitgym",
   "date": "2026-07-21",
   "lane": "cap"
  },
  "firstResponse": {
   "pol": {
    "id": "state-ags-openai-preservation-demand",
    "date": "2026-08-03",
    "lagDays": 13
   },
   "def": {
    "id": "deepmind-double-blind-evaluation-pilot",
    "date": "2026-08-27",
    "lagDays": 37
   },
   "mkt": {
    "id": "nvidia-hugging-face-reported-acquisition",
    "date": "2026-08-26",
    "lagDays": 36
   }
  }
 },
 {
  "topic": "frontier-capability",
  "name": "Frontier model capability",
  "items": [
   "public-cyber-benchmarks-saturating-faster-than-model-capability",
   "openai-gpt5-6-high-cybersecurity-capability-designation",
   "meta-muse-spark-11-cyber-high-risk-not-ruled-out",
   "xbow-cross-model-offensive-security-cost-comparison",
   "crs-in-focus-executive-order-14409-explained",
   "man-group-cyber-cat-bonds-mythos-insulation",
   "tracebit-context-bombs-decoy-defense",
   "hf-llm-forensics",
   "aisi-open-weight-cyber-gap-four-to-seven-months",
   "aisi-eval-cheating",
   "sakana-fugu-cyber",
   "kimi-k3-joint-eval",
   "msft-mai-cyber-flash",
   "secrespond-post-compromise-incident-response-benchmark",
   "dreadnode-every-model-cheats",
   "dreadnode-airtbench-open-weight-parity",
   "cisa-open-source-software-security-practices-ai-provenance",
   "senate-ai-model-access-framework-letter",
   "oncd-cairncross-black-hat-open-source-ai-and-no-regulatory-regime",
   "openai-astra-critical-cyber-delay",
   "openai-daybreak-gpt56-cyber-gated-defenders",
   "sre-bench-reverse-engineering",
   "xai-grok-4-6-cyber-scores",
   "gemini-3-7-flash-cyber-alert-threshold",
   "zai-glm-5-3-cyber-benchmarks",
   "openai-preparedness-framework-rewrite-frontier-rl-hold",
   "crowdstrike-cybench-benchmark-cheating",
   "irregular-kimi-k3-first-open-weight-solve",
   "anthropic-mythos-5-defender-access-fund",
   "aikido-open-weight-vuln-discovery-benchmark",
   "arxiv-ctf-abacus-flag-provenance-audit",
   "cisco-model-provenance-entanglement",
   "openai-astra-critical-cyber",
   "anthropic-mythos-5-1-system-card",
   "anthropic-fable-mythos-5-1-access",
   "crowdstrike-safemind-red-tempest-blue-solano",
   "google-gemini-3-8-flash-cyber",
   "google-fairwind-program",
   "boozallen-cyber-weapon-index",
   "openai-gpt6-astra-safety-overview-monitorability",
   "openai-alien-mind-superhuman-intrusion",
   "gtig-unc6508-local-llm-victim-compute",
   "amodei-pace-the-frontier-botnet-warning",
   "china-mss-chen-yixin-frontier-model-cyber-warning",
   "hacktron-claude-opus-5-openai-monorepo-access",
   "von-der-leyen-soteu-ai-hacking-warning",
   "irregular-agentic-self-modification-open-weights",
   "caisi-glm-5-3-cyber-assessment",
   "anthropic-opus-5-5-cyber-request-routing",
   "white-house-uk-aisi-frontier-model-access-review",
   "aisi-gpt6-astra-unsanctioned-supply-chain-attacks",
   "openai-gpt-6-1-astra-release-cancelled",
   "openai-gpt-6-1-sol-critical-cyber",
   "openai-dots-always-on-agents-astra",
   "anthropic-glm-5-3-exploit-development-evaluation",
   "google-gemini-4-argon-fairwind-no-cyber-guardrails",
   "horizon3-mythos-rejetto-hfs-z3-signing-key",
   "anthropic-cvd-dashboard-6157-vulnerabilities",
   "anthropic-cyber-verification-program-three-tiers",
   "openai-gpt-6-sol-luna-high-below-critical",
   "anthropic-claude-haiku-5-5-system-card-cyber",
   "white-house-genesis-mission-si-compute-commitments",
   "boozallen-ot-lab-frontier-models-eight-scenarios",
   "continuum-ai-orcacyber-zero-1-5-benchmarks",
   "meta-muse-wonder-exploitgym-intended-vulnerability-count",
   "tencent-corvus-ai-linux-vhost-cve-2026-74580",
   "anthropic-small-model-self-replication-consumer-devices",
   "xbow-chrome-full-chain-gpt-5-6-sol",
   "arxiv-cyberarena-symmetric-attack-defense-matches",
   "google-gemini-4-argon-cannot-rule-out-cyber-ccl",
   "anthropic-draft-frontier-ai-bill-commerce-thresholds",
   "epoch-open-closed-cyber-gap-six-seven-months",
   "helme-emudhra-ca-keys-claude-single-prompt",
   "dhs-fascsa-order-deepseek-federal-exclusion-removal",
   "wiz-php2shell-ai-assisted-php-core-rce",
   "f5-casi-october-leaderboard-ten-models",
   "hirundo-qwen3-coder-customer-dependent-vulnerable-code",
   "openai-frontier-training-no-live-internet-red-team-escapes",
   "openai-red-team-brotli-rce-cve-2026-111497",
   "aisi-mythos-5-incident-investigation-real-maintainer",
   "moonshot-kimi-k3-1-pro-cyber-data-removed-before-open-weights",
   "meta-muse-spark-1-3-cyber-moderate-red-team-runtime",
   "openai-gpt-6-1-terra-critical-cyber",
   "cohere-qwen-unprompted-alibaba-cloud-upload-attempt",
   "fortinet-frontier-ai-code-audit-hardening-release",
   "cathedral-ai-agents-anthropic-business-systems-12-hours",
   "anthropic-unreleased-claude-five-exploit-chains-62-chrome-cves",
   "google-gemini-4-carbon-defenders-first",
   "irregular-glm-5-3-three-of-thirteen-scenarios",
   "epoch-glm-5-3-firefox-patch-gap-exploits",
   "mistral-large-4-open-weights-uplift-real-attacks",
   "xen-xsa-523-anthropic-claude-cross-guest-memory",
   "openai-unreleased-cyber-model-948-linux-kernel-root-exploits",
   "openai-gpt-6-cyber-daybreak-red-critical",
   "eu-ai-office-capgemini-cyber-offence-gpai",
   "fmf-jailbreak-rating-framework-cyber",
   "google-deepmind-agents-legacy-rsa-1024-weaknesses",
   "anthropic-claude-mythos-5-2-verification-programs-only",
   "vals-ai-cyberoffense-ranges-open-weight-deepseek",
   "google-gemini-4-carbon-general-availability-cyber-safeguards",
   "google-deepmind-alphaproof-code-libsignal-verification",
   "anthropic-mythos-5-2-system-card-evaluation-awareness-package-test"
  ],
  "trigger": {
   "id": "public-cyber-benchmarks-saturating-faster-than-model-capability",
   "date": "2026-07-07",
   "lane": "cap"
  },
  "firstResponse": {
   "pol": {
    "id": "crs-in-focus-executive-order-14409-explained",
    "date": "2026-07-09",
    "lagDays": 2
   },
   "def": {
    "id": "tracebit-context-bombs-decoy-defense",
    "date": "2026-07-12",
    "lagDays": 5
   },
   "mkt": {
    "id": "man-group-cyber-cat-bonds-mythos-insulation",
    "date": "2026-07-10",
    "lagDays": 3
   }
  }
 },
 {
  "topic": "ai-in-attacks",
  "name": "AI in real attacks",
  "items": [
   "jadepuffer-agentic-ransomware-langflow",
   "china-linked-operators-claude-code-deepseek-government-intrusions",
   "jadepuffer-encforge",
   "hermes-thai-finance",
   "unit42-deepseek-hermes-agent-autonomous-attacks",
   "crowdstrike-2026-threat-hunting-report-ai-embedded",
   "openclaw-gym-booking-agent-autonomous-exploit",
   "taiwan-ai-agent-government-attack",
   "trellix-underground-ai-offensive-tools",
   "rapid7-operation-asterix-claude-code-crypto-vishing",
   "talos-uat-10147-agentic-ai-post-compromise",
   "uk-ncsc-agentic-ai-interim-guidance",
   "toxnetv2-linux-botnet-llm-attack-commands",
   "fbi-nsa-cnmf-qtfy-ai-integration-advisory",
   "gambit-aurora-ransomware-cursor-agent",
   "nist-nccoe-agentic-ai-identity",
   "unit42-ai-assisted-intrusion-ten-hours",
   "boozallen-vellox-guile-counter-ai",
   "unit42-latam-commercial-llm-assisted-intrusions",
   "gtig-autonomous-multi-agent-credential-harvest",
   "gtig-unc6508-local-llm-victim-compute",
   "greynoise-papercut-ai-orchestrated-campaign",
   "stop-rogue-ai-act-agent-inventory-standards",
   "anthropic-misuse-report-september-2026",
   "anthropic-gtg10007-autonomous-vulnerability-research",
   "zenox-scarlet-loop-ai-credential-stuffing-platform",
   "aepd-first-notified-ai-agent-executed-breach",
   "sophos-luciferus-uncensored-ai-subscription",
   "talos-closedquorum-autonomous-ai-c2-implant",
   "talos-cairn-ai-integrated-malware-framework",
   "microsoft-dcu-eviltokens-disruption",
   "gambit-ai-agent-skimming-campaign",
   "carbonato-docker-botnet-hermes-agent",
   "microsoft-storm-3168-azure-service-principals",
   "huntress-malicious-custom-gpt-clickfix-rat",
   "cleafy-rathat-gemini-victim-scoring-console",
   "divd-agentic-ai-intrusion",
   "divd-zammad-zero-days-agent-breach",
   "transluce-library-archives-canada-agent-probes",
   "transluce-us-canada-government-agent-request-volumes",
   "asymmetric-security-rogue-agents-investigation",
   "microsoft-digital-defense-report-2026-autonomous-execution",
   "wikimedia-openai-rogue-agent-activity-disclosure",
   "south-korea-bank-breaches-ai-pentest-tool-traces",
   "fitch-korean-bank-breaches-no-rating-impact",
   "korea-pm-information-protection-overhaul",
   "south-korea-artex-named-bank-breaches",
   "crowdstrike-artex-korea-finance-attribution",
   "artex-developer-closed-source-after-korea-hacks",
   "socradar-cyberxero-claude-code-agent-cluster-ukraine",
   "doj-openai-engineer-recording-device-charge",
   "mitre-attack-v20-ai-techniques-water-campaigns",
   "microsoft-dcu-yam-store-phishing-infrastructure-disruption",
   "semperis-2026-ransomware-report-ai-involvement",
   "zscaler-artex-korea-finance-67000-records",
   "bitsight-monst3r-ai-byok-stolen-provider-keys",
   "fbi-cisa-election-officials-si-phishing-deepfakes",
   "gmo-cybersecurity-artex-japan-attack-infrastructure",
   "norforge-cairn-aia0001-agent-shop-intrusions",
   "socradar-phantom-inc-gentlemen-exposed-ai-sessions",
   "microsoft-storm-0940-artex-connectwise-supply-chain",
   "symantec-llmjacking-skynet-autonomous-attack-agent",
   "rapid7-q3-2026-ai-operational-component-8-percent",
   "sec-fy2027-exam-priorities-ai-powered-cyberattacks",
   "unit42-php2shell-agentic-post-exploitation-european-government",
   "seoul-police-ai-assisted-hacking-ring-90-entities",
   "dream-php2shell-fragnesia-25-firewalls-rooted",
   "trendai-cyberstrikeai-44-agents-japan",
   "crowdstrike-vapor-panda-artex-200-organizations",
   "talos-nik-c2-openai-chat-completions",
   "socradar-n0n-ransomware-opencode-ai-spend",
   "chainalysis-intrusion-offensive-agentic-techniques",
   "korea-fsc-ai-hacking-inspection-meeting-five-banks",
   "kaspersky-cyberstrikeai-education-latin-america-africa",
   "gitbook-targeted-attack-using-ai-agents-api-tokens",
   "ncsc-annual-review-2026-ai-ransomware-cni-cyber-shield",
   "bitdefender-3am-ransomware-agentic-loop-uk-school",
   "chainalysis-on-path-attack-customer-passwords-kyt-offline",
   "acronis-bossai-12-agent-mesh-taiwan-emergency-services",
   "cert-in-crafty-falcon-financial-payment-apis",
   "korea-fsc-ai-era-security-meeting-580-firms-ceo-accountability",
   "microsoft-agentic-framework-github-secrets-key-vault",
   "check-point-artex-panels-operators-switch-models",
   "badbyte-backdoored-artex-docker-image",
   "workos-breach-researcher-artex-agent-escaped-test-environment",
   "chainalysis-all-users-password-hashes-live-tokens-exposed",
   "microsoft-storm-3358-artex-financial-sector",
   "censys-artex-800-deployments-no-password",
   "malbear-operation-snowball-deepseek-flash-telecom",
   "vulncheck-langflow-session-microsoft-secret-hunter-ip",
   "mittwald-mcp-server-breach-56-customer-projects",
   "elastic-infostealer-operators-claude-code-chatgpt-desktop",
   "korea-banks-2027-information-security-budgets",
   "railway-incident-report-abliterated-models-agent-speed",
   "arctic-wolf-antifox-ai-pentesting-platform-intrusions"
  ],
  "trigger": {
   "id": "jadepuffer-agentic-ransomware-langflow",
   "date": "2026-07-01",
   "lane": "atk"
  },
  "firstResponse": {
   "pol": {
    "id": "stop-rogue-ai-act-agent-inventory-standards",
    "date": "2026-09-09",
    "lagDays": 70
   },
   "def": {
    "id": "uk-ncsc-agentic-ai-interim-guidance",
    "date": "2026-08-20",
    "lagDays": 50
   },
   "mkt": {
    "id": "fitch-korean-bank-breaches-no-rating-impact",
    "date": "2026-10-06",
    "lagDays": 97
   }
  }
 },
 {
  "topic": "attacks-on-ai",
  "name": "Attacks on AI systems",
  "items": [
   "indirect-prompt-injection-web-content-browsing-agents",
   "varonis-dialogflow-rogue-agent",
   "eset-h1-2026-agent-skills",
   "dreadnode-scopejudge-offensive-agent-gating",
   "hiddenlayer-claude-code-skill-frontmatter",
   "orca-state-of-ai-security-unpatched-ai-packages",
   "fakegit",
   "pillar-ai-coding-agent-sandbox-escapes",
   "aisi-control-red-team-monitor-vulnerabilities",
   "agentforger",
   "nist-sp-800-239-ai-datacenter",
   "terraform-mcp-server-cross-tenant-credential-reuse-patch",
   "sbom-minimum-elements-2026",
   "microsoft-defender-prompt-injection-protection-preview",
   "adversa-skill-scanner-bypass",
   "mandiant-oss-supply-chain-guidance",
   "arxiv-cot-monitor-collapse",
   "cisa-open-source-software-security-practices-ai-provenance",
   "senate-ai-model-access-framework-letter",
   "arxiv-autobypass-endpoint-evasion",
   "cisa-kev-langflow-cve-2026-9198-exploited",
   "pillar-google-adk-agent-to-agent-injection",
   "keyv-npm-worm-claude-code-hook-persistence",
   "okta-gray-market-frontier-model-access-proxies",
   "blade-act-model-extraction",
   "unit42-ai-token-jacking",
   "rovoblast-atlassian-rovo-prompt-injection-exfiltration",
   "tenet-ghostjacking-log-prompt-injection",
   "pillar-deadbugz-mcp-supply-chain",
   "cisa-kev-ray-ai-framework-cve-2025-62593-exploited",
   "cosnitch-copilot-personal-one-click-exfiltration",
   "mlflow-ssrf-cve-2026-64849-exploited",
   "pillar-gemini-cli-gcp-compromise",
   "trellix-clawhub-malicious-skills",
   "adversa-cryptographic-context-injection-grok-gemini",
   "wiz-rust-arrayref-supply-chain",
   "redc2-npm-llm-operated-c2",
   "nemoclaw-ollama-dns-rebinding-model-poisoning",
   "rand-model-weight-security-sl3",
   "microsoft-ai-gateway-orchestration-intrusions",
   "wiz-ai-infrastructure-honeypot-attacks",
   "servicenow-ai-platform-critical-flaws",
   "unit42-perturbation-probing-safety-neurons",
   "metasploit-langflow-flowise-ai-platform-modules",
   "vulncheck-langflow-ai-stack-exploitation",
   "eset-guardbreaker-llm-guardrail-malware",
   "anthropic-infostealer-claude-session-hijacking",
   "metr-own-security-incidents",
   "greynoise-fake-ai-crawler-credential-scanning",
   "vulncheck-langflow-mass-exploitation",
   "manifold-gitspawn-agent-git-config-execution",
   "owasp-agent-control-standard-donation",
   "cisa-kev-litellm-mcp-auth-bypass",
   "pillar-grafana-mcp-session-spoofing-ssrf",
   "arxiv-skillshift-covert-policy-steering",
   "microsoft-ascii-smuggling-phishing-filter-evasion",
   "nightmare-eclipse-endpoint-zero-day-pocs",
   "nsa-cisa-fbi-china-ai-distillation-advisory",
   "checkpoint-chatgpt-cross-account-artifactory-channel",
   "deepseek-harness-sandbox-escape-cve-2026-82533",
   "anthropic-gtg50020-eval-sandbox-api-keys",
   "anthropic-seven-china-labs-distillation",
   "checkpoint-puzzlemask-gatekeeper-bypass",
   "gitlab-duo-chat-credential-flaw-probes",
   "sglang-safeunpickler-bypass-cve-2026-86793",
   "exposed-self-hosted-ai-endpoints-census",
   "peoples-daily-rejects-us-distillation-claims",
   "irregular-agentic-self-modification-open-weights",
   "bragjack-browser-agent-prompt-forcing",
   "air-security-plugin4shell-agent-plugin-marketplaces",
   "hush-security-mcp-config-hardcoded-credentials",
   "crowdstrike-phantomraven-llm-written-npm-stealer",
   "team-cymru-llm-relay-transfer-stations",
   "carbonato-docker-botnet-hermes-agent",
   "memtensor-sckit-supply-chain-worm",
   "salesbleed-agentforce-zero-click-exfiltration",
   "salt-labs-manus-jsfuck-single-email-hijack",
   "openai-self-replicating-prompt-injections",
   "poper-blocker-extension-ai-chat-scraping",
   "nvidia-open-agent-safety-platform-sentry",
   "unsloth-cve-2026-93348-config-code-injection",
   "openai-moonshot-distillation-campaign-disrupted",
   "gitlab-ai-gateway-prompt-template-escape-cve-2026-90970",
   "gitlab-trg-configpoisoning-deepseek-reasonix-cve-2026-102437",
   "apple-macos-full-disk-access-ai-agent-controls",
   "poellm-botnet-litellm-ollama-github-poem",
   "tuskira-ai-agent-gateway-credential-broker",
   "aws-strands-box-agent-policy-sandbox",
   "tensorlake-npm-shai-hulud-ai-tool-credentials",
   "zenity-agentcorruption-aws-agentcore",
   "ghostaction-workflows-ai-provider-api-keys",
   "microsoft-decision-1-agent-next-step-scoring",
   "fireworks-ai-internal-credentials-customer-eval-secrets",
   "npm-trusted-publishing-slug-takeover-bloom",
   "noma-sneakpeek-claude-code-desktop-exfiltration",
   "semperis-2026-ransomware-report-ai-involvement",
   "censys-2026-state-of-internet-exposed-ai-infrastructure",
   "bitsight-monst3r-ai-byok-stolen-provider-keys",
   "aoki-infostealer-ai-coding-tool-sessions",
   "opencode-console-provider-key-breach",
   "previdian-langflow-cve-2026-105740-exploitation",
   "pillar-opencode-mcp-oauth-rce-windows-wsl",
   "litellm-1-107-0-release-pipeline-compromise",
   "symantec-llmjacking-skynet-autonomous-attack-agent",
   "arrakis-dormant-agents-live-credentials-census",
   "v12-x402-sdk-agent-payment-critical-flaws",
   "harrigan-whitesides-ai-cyber-defense-act",
   "chatgpt-github-connector-prompt-injection-out-of-scope",
   "forever-security-agents-md-downloads-folder-agent-hijack",
   "anthropic-claude-duet-agent-safeguards",
   "litellm-postmortem-exposed-master-key-entry-point",
   "cloudflare-workers-ai-glm-5-3-kv-cache-cross-customer",
   "warp-breach-agent-traces-telemetry",
   "mlflow-cve-2026-116690-exploitation-attempts",
   "parameter-chatgpt-shared-link-session-takeover",
   "gitee-26400-valid-cloud-ai-credentials",
   "claude-code-extension-2-1-313-trojanized-open-vsx",
   "forever-security-embrace-assistant-embedded-browsers",
   "wiz-black-october-ai-developer-platforms-bedrock-keys",
   "google-gtig-llmjacking-llm-mixers-1-million",
   "binance-postmortem-internal-ai-tool",
   "cert-in-ai-security-auditing-guidelines-agents",
   "era-security-greeter-flowise-hello-messages",
   "vulncheck-langflow-session-microsoft-secret-hunter-ip",
   "near-ai-sglang-rce-confidential-inference-server",
   "fireworks-ai-second-intrusion-model-weights-notion-ai-chats",
   "mittwald-mcp-server-breach-56-customer-projects",
   "railway-incident-report-abliterated-models-agent-speed",
   "microsoft-lazarus-neuron-edit-backdoor-ai-agents"
  ],
  "trigger": {
   "id": "indirect-prompt-injection-web-content-browsing-agents",
   "date": "2026-07-02",
   "lane": "atk"
  },
  "firstResponse": {
   "pol": {
    "id": "senate-ai-model-access-framework-letter",
    "date": "2026-08-03",
    "lagDays": 32
   },
   "def": {
    "id": "varonis-dialogflow-rogue-agent",
    "date": "2026-07-07",
    "lagDays": 5
   }
  }
 },
 {
  "topic": "ai-found-vulnerabilities",
  "name": "AI-found vulnerabilities",
  "items": [
   "microsoft-ai-discovery-patch-volume",
   "white-house-gold-eagle-ai-vulnerability-clearinghouse",
   "microsoft-patch-tuesday-record-ai-copilot-cves",
   "xbow-bing-images-autonomous-rce",
   "vulncheck-1h-2026-ai-vuln-exploitation-rate",
   "cve-program-frontier-ai-cna-pilot",
   "epoch-july-cve-severity-spike",
   "unit42-nova-vulnerability-burst",
   "portswigger-http-terminator-ai-novel-desync",
   "off-by-1-labs-ai-generated-patches-mostly-broken",
   "asecurity-zoomsday-ai-zoom-rce",
   "rapid7-ai-assisted-sharepoint-rce-chain",
   "nist-nvd-modernization-ai-rfi",
   "metr-discovery-versus-exploitation-rates",
   "wiz-red-agent-snowflake-ci-injection",
   "google-mandiant-avdh-agentic-vuln-discovery",
   "rapid7-q2-2026-cve-doubling",
   "sharepoint-agent-found-flaw-exploited",
   "beazley-security-q2-vulnerability-surge",
   "vulncheck-ai-poc-flood",
   "echo-mythos-readiness-unreviewed-findings",
   "calif-weworm-wechat-zero-click",
   "microsoft-september-2026-patch-tuesday-record",
   "cisco-ise-hardening-frontier-ai-discovery",
   "cisco-ise-auth-bypass-actively-exploited",
   "google-pagebreak-agent-500-xss-first-party-apps",
   "google-wiz-scan-for-good-critical-infrastructure",
   "github-taskflow-agent-android-vulnerabilities",
   "openai-codex-security-cloud-devday",
   "gtig-ai-discovered-vulnerabilities-rce-share",
   "horizon3-mythos-rejetto-hfs-z3-signing-key",
   "microsoft-digital-defense-report-2026-autonomous-execution",
   "anthropic-cvd-dashboard-6157-vulnerabilities",
   "rejetto-hfs-cve-2026-61500-exploited-in-the-wild",
   "google-oss-vrp-pauses-product-vulnerability-reports",
   "ibm-red-hat-lightwell-400-java-vulnerabilities",
   "northwestern-llm-patching-benchmark-reliability",
   "anthropic-cyber-mission-critical-infrastructure-oss-scanner",
   "tencent-corvus-ai-linux-vhost-cve-2026-74580",
   "microsoft-october-2026-patch-tuesday-1415-cves",
   "xbow-chrome-full-chain-gpt-5-6-sol",
   "bank-of-america-mythos-remediation-contractors",
   "helme-emudhra-ca-keys-claude-single-prompt",
   "curl-public-tracker-low-medium-reports",
   "wiz-php2shell-ai-assisted-php-core-rce",
   "aws-php2shell-exploit-attempt-before-disclosure",
   "cisa-php2shell-alert-not-observed-exploitation",
   "openai-red-team-brotli-rce-cve-2026-111497",
   "php2shell-honeypot-confirmed-rce-shells",
   "unit42-php2shell-agentic-post-exploitation-european-government",
   "fortinet-frontier-ai-code-audit-hardening-release",
   "japan-first-ministerial-cyber-meeting-aisi-ai-vulnerability",
   "dream-php2shell-fragnesia-25-firewalls-rooted",
   "brotli-cve-2026-111497-in-the-wild-exploit-traffic",
   "anthropic-unreleased-claude-five-exploit-chains-62-chrome-cves",
   "mozilla-firefox-159-openai-codex-security-34-credits",
   "palo-alto-pan-os-php2shell-active-exploitation",
   "epoch-glm-5-3-firefox-patch-gap-exploits",
   "xen-xsa-523-anthropic-claude-cross-guest-memory",
   "openai-unreleased-cyber-model-948-linux-kernel-root-exploits",
   "japan-seek-undisclosed-vulnerability-information-us-ai-firms",
   "japan-emergency-cyber-package-10bn-yen-rescue-team",
   "torvalds-linux-7-4-rc2-ai-fixes",
   "qualys-ceo-patch-tuesday-1414-vs-93",
   "insurance-journal-php2shell-long-tail-risk",
   "microsoft-november-2026-patch-tuesday-claude-credited-outlook-zero-day",
   "enisa-state-of-cybersecurity-union-2026-frontier-ai"
  ],
  "trigger": {
   "id": "microsoft-ai-discovery-patch-volume",
   "date": "2026-07-09",
   "lane": "cap"
  },
  "firstResponse": {
   "pol": {
    "id": "white-house-gold-eagle-ai-vulnerability-clearinghouse",
    "date": "2026-07-14",
    "lagDays": 5
   },
   "def": {
    "id": "microsoft-patch-tuesday-record-ai-copilot-cves",
    "date": "2026-07-14",
    "lagDays": 5
   },
   "mkt": {
    "id": "beazley-security-q2-vulnerability-surge",
    "date": "2026-08-18",
    "lagDays": 40
   }
  }
 },
 {
  "topic": "critical-infrastructure",
  "name": "Critical infrastructure",
  "items": [
   "iran-plc",
   "fbi-epa-alert-water-wastewater-plc-targeting",
   "csis-iran-water-mapping",
   "cisa-nsa-fbi-siemens-s7-ai-generated-exploit-scripts",
   "project-watershed-250-texas-water",
   "colorado-water-utilities-ot-intrusions",
   "spycloud-water-utility-infostealer-exposure",
   "cisa-fbi-third-party-ics-integrator-considerations",
   "google-wiz-scan-for-good-critical-infrastructure",
   "anthropic-cyber-mission-critical-infrastructure-oss-scanner",
   "doj-fbi-seize-flax-typhoon-scanning-phishing-tools",
   "boozallen-ot-lab-frontier-models-eight-scenarios",
   "danfoss-refrigeration-controllers-french-supermarkets",
   "mitre-attack-v20-ai-techniques-water-campaigns",
   "lumen-volt-typhoon-silent-train-control-planes",
   "ncsc-annual-review-2026-ai-ransomware-cni-cyber-shield",
   "acronis-bossai-12-agent-mesh-taiwan-emergency-services",
   "refrigeration-attacks-11-countries-french-blood-service",
   "cisa-fbi-refrigeration-cold-chain-guidance",
   "france-attributes-refrigeration-sabotage-irgc-shahid-kaveh"
  ],
  "trigger": {
   "id": "iran-plc",
   "date": "2026-07-22",
   "lane": "atk"
  },
  "firstResponse": {
   "pol": {
    "id": "ncsc-annual-review-2026-ai-ransomware-cni-cyber-shield",
    "date": "2026-11-03",
    "lagDays": 104
   },
   "def": {
    "id": "project-watershed-250-texas-water",
    "date": "2026-08-31",
    "lagDays": 40
   }
  }
 }
]