[
 {
  "topic": "evaluation-incidents",
  "name": "Lab evaluation incidents",
  "items": [
   "hf-llm-forensics",
   "openai-exploitgym",
   "anthropic-claude-models-breached-real-systems-in-evals",
   "state-ags-openai-preservation-demand",
   "openai-third-party-cyber-evaluations-disclosure",
   "aisi-unsanctioned-agent-actions",
   "ncsc-statement-frontier-ai-evaluation-incidents",
   "meta-model-exploited-flaw-in-irregular-evaluation",
   "house-democrats-anthropic-eval-oversight-letter",
   "sanders-ai-development-pause-letter",
   "anthropic-august-risk-report-misalignment-low",
   "irregular-eval-incidents-postmortem",
   "guidelight-frontier-lab-rogue-model-containment-scorecard",
   "alabama-ag-openai-hugging-face-investigation-subpoena",
   "nvidia-hugging-face-reported-acquisition",
   "metr-redwood-eval-agent-coordination-investigation",
   "cisa-kev-artifactory-linux-kernel-openai-agent-flaws",
   "deepmind-double-blind-evaluation-pilot",
   "anthropic-alignment-security-remediation",
   "nvidia-hugging-face-definitive-agreement",
   "deepmind-agent-swarm-cheating-whistleblowing",
   "reuters-dsewiki-openai-agent-breakout",
   "openai-misalignment-disclosure-standard",
   "openai-research-acceleration-container-shutdown",
   "anthropic-alignment-assessment-four-incidents",
   "openai-agents-additional-coordination-sites",
   "anthropic-gtg50020-eval-sandbox-api-keys",
   "hawley-openai-hugging-face-investigation",
   "openai-agents-rubygems-may-campaign",
   "senate-frontier-ai-duty-of-care-negotiations",
   "openai-model-misalignment-reporting-framework",
   "openai-agents-hugging-face-may-precursor",
   "google-gemini-irregular-eval-three-companies",
   "california-eo-n-9-26-ai-kill-switch-onsite-verification",
   "california-ai-eo-independent-expert-panel",
   "oregon-executive-order-26-26-ai-procurement",
   "transluce-urlquery-agent-hacking-attempts",
   "perplexity-space-agent-network-policy-bypass",
   "openai-agent-services-australia-medicare-portal",
   "openai-agent-user-images-misalignment-disclosure",
   "openai-dns-sandbox-escape-training-pause",
   "openai-self-replicating-prompt-injections",
   "openai-model-split-github-token-secret-scanning",
   "openai-agents-us-federal-agency-websites",
   "aisi-gpt6-astra-unsanctioned-supply-chain-attacks",
   "florida-ag-injunction-openai-model-development"
  ],
  "trigger": {
   "id": "openai-exploitgym",
   "date": "2026-07-21",
   "lane": "cap"
  },
  "firstResponse": {
   "pol": {
    "id": "state-ags-openai-preservation-demand",
    "date": "2026-08-03",
    "lagDays": 13
   },
   "def": {
    "id": "deepmind-double-blind-evaluation-pilot",
    "date": "2026-08-27",
    "lagDays": 37
   },
   "mkt": {
    "id": "nvidia-hugging-face-reported-acquisition",
    "date": "2026-08-26",
    "lagDays": 36
   }
  }
 },
 {
  "topic": "frontier-capability",
  "name": "Frontier model capability",
  "items": [
   "public-cyber-benchmarks-saturating-faster-than-model-capability",
   "openai-gpt5-6-high-cybersecurity-capability-designation",
   "meta-muse-spark-11-cyber-high-risk-not-ruled-out",
   "xbow-cross-model-offensive-security-cost-comparison",
   "crs-in-focus-executive-order-14409-explained",
   "hf-llm-forensics",
   "aisi-open-weight-cyber-gap-four-to-seven-months",
   "aisi-eval-cheating",
   "sakana-fugu-cyber",
   "kimi-k3-joint-eval",
   "msft-mai-cyber-flash",
   "secrespond-post-compromise-incident-response-benchmark",
   "dreadnode-every-model-cheats",
   "dreadnode-airtbench-open-weight-parity",
   "cisa-open-source-software-security-practices-ai-provenance",
   "senate-ai-model-access-framework-letter",
   "oncd-cairncross-black-hat-open-source-ai-and-no-regulatory-regime",
   "openai-astra-critical-cyber-delay",
   "openai-daybreak-gpt56-cyber-gated-defenders",
   "sre-bench-reverse-engineering",
   "xai-grok-4-6-cyber-scores",
   "gemini-3-7-flash-cyber-alert-threshold",
   "zai-glm-5-3-cyber-benchmarks",
   "openai-preparedness-framework-rewrite-frontier-rl-hold",
   "crowdstrike-cybench-benchmark-cheating",
   "irregular-kimi-k3-first-open-weight-solve",
   "anthropic-mythos-5-defender-access-fund",
   "aikido-open-weight-vuln-discovery-benchmark",
   "arxiv-ctf-abacus-flag-provenance-audit",
   "cisco-model-provenance-entanglement",
   "openai-astra-critical-cyber",
   "anthropic-mythos-5-1-system-card",
   "anthropic-fable-mythos-5-1-access",
   "crowdstrike-safemind-red-tempest-blue-solano",
   "google-gemini-3-8-flash-cyber",
   "google-fairwind-program",
   "boozallen-cyber-weapon-index",
   "openai-gpt6-astra-safety-overview-monitorability",
   "openai-alien-mind-superhuman-intrusion",
   "gtig-unc6508-local-llm-victim-compute",
   "amodei-pace-the-frontier-botnet-warning",
   "china-mss-chen-yixin-frontier-model-cyber-warning",
   "hacktron-claude-opus-5-openai-monorepo-access",
   "von-der-leyen-soteu-ai-hacking-warning",
   "irregular-agentic-self-modification-open-weights",
   "anthropic-opus-5-5-cyber-request-routing",
   "white-house-uk-aisi-frontier-model-access-review",
   "aisi-gpt6-astra-unsanctioned-supply-chain-attacks",
   "openai-gpt-6-1-astra-release-cancelled"
  ],
  "trigger": {
   "id": "public-cyber-benchmarks-saturating-faster-than-model-capability",
   "date": "2026-07-07",
   "lane": "cap"
  },
  "firstResponse": {
   "pol": {
    "id": "crs-in-focus-executive-order-14409-explained",
    "date": "2026-07-09",
    "lagDays": 2
   },
   "def": {
    "id": "hf-llm-forensics",
    "date": "2026-07-16",
    "lagDays": 9
   }
  }
 },
 {
  "topic": "ai-in-attacks",
  "name": "AI in real attacks",
  "items": [
   "jadepuffer-agentic-ransomware-langflow",
   "china-linked-operators-claude-code-deepseek-government-intrusions",
   "jadepuffer-encforge",
   "hermes-thai-finance",
   "unit42-deepseek-hermes-agent-autonomous-attacks",
   "crowdstrike-2026-threat-hunting-report-ai-embedded",
   "openclaw-gym-booking-agent-autonomous-exploit",
   "taiwan-ai-agent-government-attack",
   "trellix-underground-ai-offensive-tools",
   "rapid7-operation-asterix-claude-code-crypto-vishing",
   "talos-uat-10147-agentic-ai-post-compromise",
   "uk-ncsc-agentic-ai-interim-guidance",
   "toxnetv2-linux-botnet-llm-attack-commands",
   "fbi-nsa-cnmf-qtfy-ai-integration-advisory",
   "gambit-aurora-ransomware-cursor-agent",
   "nist-nccoe-agentic-ai-identity",
   "unit42-ai-assisted-intrusion-ten-hours",
   "boozallen-vellox-guile-counter-ai",
   "unit42-latam-commercial-llm-assisted-intrusions",
   "gtig-autonomous-multi-agent-credential-harvest",
   "gtig-unc6508-local-llm-victim-compute",
   "greynoise-papercut-ai-orchestrated-campaign",
   "stop-rogue-ai-act-agent-inventory-standards",
   "anthropic-misuse-report-september-2026",
   "anthropic-gtg10007-autonomous-vulnerability-research",
   "aepd-first-notified-ai-agent-executed-breach",
   "sophos-luciferus-uncensored-ai-subscription",
   "talos-closedquorum-autonomous-ai-c2-implant",
   "talos-cairn-ai-integrated-malware-framework",
   "microsoft-dcu-eviltokens-disruption",
   "gambit-ai-agent-skimming-campaign",
   "carbonato-docker-botnet-hermes-agent",
   "microsoft-storm-3168-azure-service-principals"
  ],
  "trigger": {
   "id": "jadepuffer-agentic-ransomware-langflow",
   "date": "2026-07-01",
   "lane": "atk"
  },
  "firstResponse": {
   "pol": {
    "id": "stop-rogue-ai-act-agent-inventory-standards",
    "date": "2026-09-09",
    "lagDays": 70
   },
   "def": {
    "id": "uk-ncsc-agentic-ai-interim-guidance",
    "date": "2026-08-20",
    "lagDays": 50
   }
  }
 },
 {
  "topic": "attacks-on-ai",
  "name": "Attacks on AI systems",
  "items": [
   "indirect-prompt-injection-web-content-browsing-agents",
   "varonis-dialogflow-rogue-agent",
   "eset-h1-2026-agent-skills",
   "dreadnode-scopejudge-offensive-agent-gating",
   "hiddenlayer-claude-code-skill-frontmatter",
   "orca-state-of-ai-security-unpatched-ai-packages",
   "fakegit",
   "pillar-ai-coding-agent-sandbox-escapes",
   "aisi-control-red-team-monitor-vulnerabilities",
   "agentforger",
   "nist-sp-800-239-ai-datacenter",
   "terraform-mcp-server-cross-tenant-credential-reuse-patch",
   "sbom-minimum-elements-2026",
   "microsoft-defender-prompt-injection-protection-preview",
   "adversa-skill-scanner-bypass",
   "mandiant-oss-supply-chain-guidance",
   "arxiv-cot-monitor-collapse",
   "cisa-open-source-software-security-practices-ai-provenance",
   "senate-ai-model-access-framework-letter",
   "arxiv-autobypass-endpoint-evasion",
   "cisa-kev-langflow-cve-2026-9198-exploited",
   "pillar-google-adk-agent-to-agent-injection",
   "keyv-npm-worm-claude-code-hook-persistence",
   "okta-gray-market-frontier-model-access-proxies",
   "blade-act-model-extraction",
   "unit42-ai-token-jacking",
   "rovoblast-atlassian-rovo-prompt-injection-exfiltration",
   "tenet-ghostjacking-log-prompt-injection",
   "pillar-deadbugz-mcp-supply-chain",
   "cisa-kev-ray-ai-framework-cve-2025-62593-exploited",
   "cosnitch-copilot-personal-one-click-exfiltration",
   "mlflow-ssrf-cve-2026-64849-exploited",
   "pillar-gemini-cli-gcp-compromise",
   "trellix-clawhub-malicious-skills",
   "adversa-cryptographic-context-injection-grok-gemini",
   "wiz-rust-arrayref-supply-chain",
   "redc2-npm-llm-operated-c2",
   "nemoclaw-ollama-dns-rebinding-model-poisoning",
   "rand-model-weight-security-sl3",
   "microsoft-ai-gateway-orchestration-intrusions",
   "wiz-ai-infrastructure-honeypot-attacks",
   "servicenow-ai-platform-critical-flaws",
   "unit42-perturbation-probing-safety-neurons",
   "metasploit-langflow-flowise-ai-platform-modules",
   "vulncheck-langflow-ai-stack-exploitation",
   "eset-guardbreaker-llm-guardrail-malware",
   "anthropic-infostealer-claude-session-hijacking",
   "metr-own-security-incidents",
   "greynoise-fake-ai-crawler-credential-scanning",
   "vulncheck-langflow-mass-exploitation",
   "manifold-gitspawn-agent-git-config-execution",
   "owasp-agent-control-standard-donation",
   "cisa-kev-litellm-mcp-auth-bypass",
   "pillar-grafana-mcp-session-spoofing-ssrf",
   "arxiv-skillshift-covert-policy-steering",
   "microsoft-ascii-smuggling-phishing-filter-evasion",
   "nightmare-eclipse-endpoint-zero-day-pocs",
   "nsa-cisa-fbi-china-ai-distillation-advisory",
   "checkpoint-chatgpt-cross-account-artifactory-channel",
   "deepseek-harness-sandbox-escape-cve-2026-82533",
   "anthropic-gtg50020-eval-sandbox-api-keys",
   "anthropic-seven-china-labs-distillation",
   "checkpoint-puzzlemask-gatekeeper-bypass",
   "gitlab-duo-chat-credential-flaw-probes",
   "sglang-safeunpickler-bypass-cve-2026-86793",
   "exposed-self-hosted-ai-endpoints-census",
   "peoples-daily-rejects-us-distillation-claims",
   "irregular-agentic-self-modification-open-weights",
   "bragjack-browser-agent-prompt-forcing",
   "air-security-plugin4shell-agent-plugin-marketplaces",
   "hush-security-mcp-config-hardcoded-credentials",
   "crowdstrike-phantomraven-llm-written-npm-stealer",
   "team-cymru-llm-relay-transfer-stations",
   "carbonato-docker-botnet-hermes-agent",
   "memtensor-sckit-supply-chain-worm",
   "salesbleed-agentforce-zero-click-exfiltration",
   "openai-self-replicating-prompt-injections",
   "nvidia-open-agent-safety-platform-sentry"
  ],
  "trigger": {
   "id": "indirect-prompt-injection-web-content-browsing-agents",
   "date": "2026-07-02",
   "lane": "atk"
  },
  "firstResponse": {
   "pol": {
    "id": "senate-ai-model-access-framework-letter",
    "date": "2026-08-03",
    "lagDays": 32
   },
   "def": {
    "id": "varonis-dialogflow-rogue-agent",
    "date": "2026-07-07",
    "lagDays": 5
   }
  }
 },
 {
  "topic": "ai-found-vulnerabilities",
  "name": "AI-found vulnerabilities",
  "items": [
   "microsoft-ai-discovery-patch-volume",
   "white-house-gold-eagle-ai-vulnerability-clearinghouse",
   "microsoft-patch-tuesday-record-ai-copilot-cves",
   "xbow-bing-images-autonomous-rce",
   "vulncheck-1h-2026-ai-vuln-exploitation-rate",
   "cve-program-frontier-ai-cna-pilot",
   "epoch-july-cve-severity-spike",
   "unit42-nova-vulnerability-burst",
   "portswigger-http-terminator-ai-novel-desync",
   "off-by-1-labs-ai-generated-patches-mostly-broken",
   "asecurity-zoomsday-ai-zoom-rce",
   "rapid7-ai-assisted-sharepoint-rce-chain",
   "nist-nvd-modernization-ai-rfi",
   "metr-discovery-versus-exploitation-rates",
   "wiz-red-agent-snowflake-ci-injection",
   "google-mandiant-avdh-agentic-vuln-discovery",
   "rapid7-q2-2026-cve-doubling",
   "sharepoint-agent-found-flaw-exploited",
   "beazley-security-q2-vulnerability-surge",
   "vulncheck-ai-poc-flood",
   "echo-mythos-readiness-unreviewed-findings",
   "calif-weworm-wechat-zero-click",
   "microsoft-september-2026-patch-tuesday-record",
   "cisco-ise-hardening-frontier-ai-discovery",
   "cisco-ise-auth-bypass-actively-exploited",
   "github-taskflow-agent-android-vulnerabilities"
  ],
  "trigger": {
   "id": "microsoft-ai-discovery-patch-volume",
   "date": "2026-07-09",
   "lane": "cap"
  },
  "firstResponse": {
   "pol": {
    "id": "white-house-gold-eagle-ai-vulnerability-clearinghouse",
    "date": "2026-07-14",
    "lagDays": 5
   },
   "def": {
    "id": "microsoft-patch-tuesday-record-ai-copilot-cves",
    "date": "2026-07-14",
    "lagDays": 5
   },
   "mkt": {
    "id": "beazley-security-q2-vulnerability-surge",
    "date": "2026-08-18",
    "lagDays": 40
   }
  }
 },
 {
  "topic": "critical-infrastructure",
  "name": "Critical infrastructure",
  "items": [
   "iran-plc",
   "fbi-epa-alert-water-wastewater-plc-targeting",
   "csis-iran-water-mapping",
   "cisa-nsa-fbi-siemens-s7-ai-generated-exploit-scripts",
   "project-watershed-250-texas-water",
   "colorado-water-utilities-ot-intrusions",
   "spycloud-water-utility-infostealer-exposure",
   "cisa-fbi-third-party-ics-integrator-considerations"
  ],
  "trigger": {
   "id": "iran-plc",
   "date": "2026-07-22",
   "lane": "atk"
  },
  "firstResponse": {
   "def": {
    "id": "project-watershed-250-texas-water",
    "date": "2026-08-31",
    "lagDays": 40
   }
  }
 }
]