| MITRE ATLAS | Frameworks and Standards | Risk Frameworks |
| NIST AI Risk Management Framework | Frameworks and Standards | Risk Frameworks |
| Google SAIF Map | Frameworks and Standards | Risk Frameworks |
| Pillar Security - AI Risk | Frameworks and Standards | Risk Frameworks |
| MIT AI Risk Repository | Frameworks and Standards | Risk Frameworks |
| AI Security Forum | Frameworks and Standards | Risk Frameworks |
| Cybersecurity Framework Profile for Artificial Intelligence (NIST IR 8596) | Frameworks and Standards | Risk Frameworks |
| SL5 Standard for AI Security: A NIST SP 800-53 Overlay for Frontier AI Infrastructure | Frameworks and Standards | Risk Frameworks |
| NIST AI 800-4: Challenges to the Monitoring of Deployed AI Systems | Frameworks and Standards | Risk Frameworks |
| AI Resilience Maturity Model | Frameworks and Standards | Risk Frameworks |
| AI Risk Database | Frameworks and Standards | Risk Frameworks |
| AI Risks that Could Lead to Catastrophe - CAIS | Frameworks and Standards | Risk Frameworks |
| AI Risk Database | Frameworks and Standards | Risk Frameworks |
| AI Risk Database | Frameworks and Standards | Risk Frameworks |
| Introducing the Frontier Safety Framework | Frameworks and Standards | Risk Frameworks |
| Cybersecurity AI (CAI), the framework f | Frameworks and Standards | Risk Frameworks |
| openrisk is a tool that generat | Frameworks and Standards | Risk Frameworks |
| NIST RFI: Security Considerations for AI Agents — Public Comments (NIST-2025-0035) | Frameworks and Standards | Risk Frameworks |
| Mythos-Ready Assessment Framework (CSA) | Frameworks and Standards | Risk Frameworks |
| 2023 CWE Top 25 Most Dangerous Software Weaknesses | Frameworks and Standards | Risk Frameworks |
| Agentic Trust Controls - agentic security and governance controls for ISO 27001 and ISO 42001 | Frameworks and Standards | Risk Frameworks |
| AI Defense Matrix - a framework for defending AI systems aligned with NIST CSF 2.0 | Frameworks and Standards | Risk Frameworks |
| Announcing CVSS v4.0 - FIRST presentation | Frameworks and Standards | Risk Frameworks |
| AVID Taxonomy Library - AI Vulnerability Database failure mode taxonomy | Frameworks and Standards | Risk Frameworks |
| Bugcrowd Vulnerability Rating Taxonomy - baseline priority ratings for common vulnerabilities | Frameworks and Standards | Risk Frameworks |
| CISA Stakeholder-Specific Vulnerability Categorization - SSVC | Frameworks and Standards | Risk Frameworks |
| Conflicting Scores, Confusing Signals: An Empirical Study of Vulnerability Scoring Systems | Frameworks and Standards | Risk Frameworks |
| CSA AI Security Maturity Model | Frameworks and Standards | Risk Frameworks |
| ENISA Multilayer Framework for Good Cybersecurity Practices for AI | Frameworks and Standards | Risk Frameworks |
| How Material is That Hack | Frameworks and Standards | Risk Frameworks |
| Introducing EPSS v4 - Exploit Prediction Scoring System | Frameworks and Standards | Risk Frameworks |
| Mission Assurance Security Standard MA-S2 for Software | Frameworks and Standards | Risk Frameworks |
| MITRE ATLAS | Frameworks and Standards | Risk Frameworks |
| MITRE ATLAS - Tactics | Frameworks and Standards | Risk Frameworks |
| MITRE Fight Fraud Framework - F3, TTP knowledge base for cyber fraud | Frameworks and Standards | Risk Frameworks |
| NIST AI 100-2 E2023: Adversarial Machine Learning - A Taxonomy and Terminology of Attacks and Mitigations | Frameworks and Standards | Risk Frameworks |
| NIST AI 100-2e2023: Adversarial Machine Learning - A Taxonomy and Terminology of Attacks and Mitigations | Frameworks and Standards | Risk Frameworks |
| NIST AI RMF Playbook | Frameworks and Standards | Risk Frameworks |
| NIST IR 8397 - Guidelines on Minimum Standards for Developer Verification of Software | Frameworks and Standards | Risk Frameworks |
| NIST Secure Software Development Framework - SSDF and SP 800-218A for Generative AI | Frameworks and Standards | Risk Frameworks |
| NIST SP 1353 - Using AI for Cybersecurity Framework 2.0 Analysis and Reporting | Frameworks and Standards | Risk Frameworks |
| NIST SP 800-161r1 - Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations | Frameworks and Standards | Risk Frameworks |
| NIST SP 800-53 Rev. 5 - Security and Privacy Controls for Information Systems and Organizations | Frameworks and Standards | Risk Frameworks |
| RiskRubric - AI risk assessment framework | Frameworks and Standards | Risk Frameworks |
| The NIST Cybersecurity Framework CSF 2.0 | Frameworks and Standards | Risk Frameworks |
| Zoom VISS - Vulnerability Impact Scoring System calculator | Frameworks and Standards | Risk Frameworks |
| OWASP Top 10 for LLM Applications 2025 | Frameworks and Standards | OWASP |
| Agent Name Service (ANS) for Secure Al Agent Discovery v1.0 | Frameworks and Standards | OWASP |
| A very brief, one-line description of your project | Frameworks and Standards | OWASP |
| Solutions Landscape | Frameworks and Standards | OWASP |
| www-project-top-10-for-large-language-model-applications/assets/PDF | Frameworks and Standards | OWASP |
| Meetings | Frameworks and Standards | OWASP |
| OWASP GenAI Data Security Risks and Mitigations 2026 | Frameworks and Standards | OWASP |
| OWASP AI Security Visualizer | Frameworks and Standards | OWASP |
| OWASP Agentic Skills Top 10 - Skill Security Assessment Checklist | Frameworks and Standards | OWASP |
| OWASP Agentic Skills Top 10 Whitepaper | Frameworks and Standards | OWASP |
| OWASP AI Agent Security Cheat Sheet | Frameworks and Standards | OWASP |
| OWASP AI Exchange | Frameworks and Standards | OWASP |
| OWASP AISVS - AI Security Verification Standard 1.0 PDF build | Frameworks and Standards | OWASP |
| OWASP APTS - Autonomous Penetration Testing Standard | Frameworks and Standards | OWASP |
| OWASP Calls to Build a Unified Framework for Global Vulnerability Intelligence | Frameworks and Standards | OWASP |
| OWASP GenAI Crosswalk - mapping GenAI and agentic security risks to 25 frameworks | Frameworks and Standards | OWASP |
| OWASP IoT Security Testing Guide | Frameworks and Standards | OWASP |
| OWASP Netryx - modular Java web security framework | Frameworks and Standards | OWASP |
| OWASP OASIS - AppSec community validating credible fixes for open source software | Frameworks and Standards | OWASP |
| OWASP Security Champions Guide | Frameworks and Standards | OWASP |
| OWASP Top 10 API vulnerabilities - Web Security Academy | Frameworks and Standards | OWASP |
| OWASP Top 10 for LLM Applications - GenAI-LLM-Top10 repo | Frameworks and Standards | OWASP |
| The Top 10 OWASP Top 10s | Frameworks and Standards | OWASP |
| PHARE by Giskard | Frameworks and Standards | Security Benchmarks |
| RealHarm by Giskard | Frameworks and Standards | Security Benchmarks |
| Security for AI: The New Wave of Startups Racing to Secure the | Frameworks and Standards | Security Landscape |
| Security and compliance proxy for LLM APIs | Frameworks and Standards | Security Landscape |
| Independent AI Oversight Layer — monit | Frameworks and Standards | Security Landscape |
| Enhance AI security and governance across multi-model and multi-clo | Frameworks and Standards | Security Landscape |
| LLM Safeguards: Security Privacy Compliance Anti Hallucination: Dan | Frameworks and Standards | Security Landscape |
| 2023 Cybersecurity Market Review - Disruption and Resilience | Frameworks and Standards | Security Landscape |
| 2025 CWE Top 25 Most Dangerous Software Weaknesses | Frameworks and Standards | Security Landscape |
| 2026 AI Threat Landscape Report | Frameworks and Standards | Security Landscape |
| A Field Guide to the AI Security Market | Frameworks and Standards | Security Landscape |
| AI Security Companies List - Tejas Cyber Network | Frameworks and Standards | Security Landscape |
| Ankita Gupta shares Top 12 tools for LLM security from Austin API Summit talk | Frameworks and Standards | Security Landscape |
| C2PA - content provenance and authenticity standard | Frameworks and Standards | Security Landscape |
| CISA Product Security Bad Practices - guidance for software manufacturers | Frameworks and Standards | Security Landscape |
| CISA Secure by Design - Shifting the Balance of Cybersecurity Risk | Frameworks and Standards | Security Landscape |
| Cybersecurity Forecast 2026 - Google Cloud | Frameworks and Standards | Security Landscape |
| GenAI Security - The Comprehensive Guide | Frameworks and Standards | Security Landscape |
| Latio - compare cybersecurity tools and vendor reviews | Frameworks and Standards | Security Landscape |
| MITRE Security Automation Framework SAF - Normalize | Frameworks and Standards | Security Landscape |
| NIST IR 8517 - Hardware Security Failure Scenarios: Potential Hardware Weaknesses | Frameworks and Standards | Security Landscape |
| OpenAI: Disrupting Malicious Uses of AI - February 2026 Threat Report | Frameworks and Standards | Security Landscape |
| RSAC Innovation Sandbox security startup competition | Frameworks and Standards | Security Landscape |
| Security Titles - standardizing cybersecurity job titles | Frameworks and Standards | Security Landscape |
| WEF Global Cybersecurity Outlook 2025 | Frameworks and Standards | Security Landscape |
| Y Combinator's Summer 2023 Cybersecurity, Privacy, and Trust Startups | Frameworks and Standards | Security Landscape |
| Responsible AI in Enterprise Applications: A Practitioner's View | Governance and Policy | Enterprise Governance |
| A Strategic Framework for AI Product Development and Evaluation in Enterprise Software | Governance and Policy | Enterprise Governance |
| Blueprints of Trust: AI System Cards for End to End Transparency and Governance | Governance and Policy | Enterprise Governance |
| CISO MindMap 2024: What do InfoSec Professionals Really Do | Governance and Policy | Enterprise Governance |
| Enterprise AI Governance at Snowflake: Balancing Innovation and Risk - slides | Governance and Policy | Enterprise Governance |
| Enterprise AI security posture for coding tools - r/devsecops | Governance and Policy | Enterprise Governance |
| GitHub Copilot: Enterprise team specialization for managed settings | Governance and Policy | Enterprise Governance |
| Golf - AI governance and shadow AI discovery platform | Governance and Policy | Enterprise Governance |
| Introducing VibeGuard: AI Security and Governance | Governance and Policy | Enterprise Governance |
| Team8 - Generative AI and ChatGPT Enterprise Risks | Governance and Policy | Enterprise Governance |
| The anecdotes AI GRC Toolkit | Governance and Policy | Enterprise Governance |
| VS Code for enterprise - centrally managing settings, extensions and AI policies | Governance and Policy | Enterprise Governance |
| What policies are you writing or considering for GPT-4 - r/cybersecurity | Governance and Policy | Enterprise Governance |
| The Generative AI Policy Landscape in Open Source | Governance and Policy | AI Policy |
| Contributions policy · Issue #7695 · tldraw/tldraw | Governance and Policy | AI Policy |
| Generative AI Policy - Asahi Linux Documentation | Governance and Policy | AI Policy |
| Our First Generalist Policy | Governance and Policy | AI Policy |
| Updates to Consumer Terms and Privacy Policy | Governance and Policy | AI Policy |
| IBB Policy Update: AI-Assisted Submissions | Governance and Policy | AI Policy |
| A Flock license plate reader linked a San Diego man to a violent crime - he was five miles away | Governance and Policy | AI Policy |
| A Pro-Innovation Approach to AI Regulation - UK Government White Paper | Governance and Policy | AI Policy |
| AI 2040: Plan A - A forecast and policy plan for navigating superintelligence | Governance and Policy | AI Policy |
| AI for Wisconsin - KC Streich write-in campaign for AI-assisted governance | Governance and Policy | AI Policy |
| AI Now 2025 Landscape Report | Governance and Policy | AI Policy |
| Altman says OpenAI agrees with Anthropic's red lines in Pentagon dispute | Governance and Policy | AI Policy |
| Anthropic joins RAISE US, a nonprofit AI workforce coalition | Governance and Policy | AI Policy |
| Anthropic says capability cited by US in restricting Fable 5 is already available from other models | Governance and Policy | AI Policy |
| Anthropic statement on US government directive to suspend access to Fable 5 and Mythos 5 | Governance and Policy | AI Policy |
| Arnaud Bertrand on Palantir's AI sovereignty narrative and closed-model economics | Governance and Policy | AI Policy |
| Automation Without Understanding - AI mathematical capability as strategic vulnerability | Governance and Policy | AI Policy |
| bdsqlsz on Reuters misrepresenting China's tiered plan to restrict access to frontier AI models | Governance and Policy | AI Policy |
| Bindu Reddy on India requiring government approval to deploy GenAI models | Governance and Policy | AI Policy |
| Blueprint for an AI Bill of Rights | Governance and Policy | AI Policy |
| China considers restricting overseas access to cutting-edge AI models, citing cyberattack concerns | Governance and Policy | AI Policy |
| CISA Gold Eagle: Advancing AI-Driven Vulnerability Reporting | Governance and Policy | AI Policy |
| CISA Roadmap for Artificial Intelligence 2023-2024 | Governance and Policy | AI Policy |
| Congressional oversight letter to Anthropic regarding AI model security incidents | Governance and Policy | AI Policy |
| DeepSeek Unmasked - House Select Committee on the CCP report | Governance and Policy | AI Policy |
| Designing Loyalty - AI Agents and Conflicts of Interest, Stanford HAI | Governance and Policy | AI Policy |
| DHS Roles and Responsibilities Framework for Artificial Intelligence in Critical Infrastructure | Governance and Policy | AI Policy |
| Diversion and resale: estimating compute smuggling to China | Governance and Policy | AI Policy |
| Flock Has a Powerful New AI Tool for Police. We Got Its Code - WIRED | Governance and Policy | AI Policy |
| HashiCorp comment on NIST AI Agent Security RFI - Agentic Runtime Security | Governance and Policy | AI Policy |
| Introducing the Responsible Builder Policy - r/redditdev | Governance and Policy | AI Policy |
| Letter to Speaker Johnson Requesting AI Hearings | Governance and Policy | AI Policy |
| Magnifica Humanitas - Pope Leo XIV encyclical on safeguarding the human person in the time of AI | Governance and Policy | AI Policy |
| Minnesota Privacy Project - advocacy against license plate reader surveillance | Governance and Policy | AI Policy |
| Model AI Governance Framework for Generative AI | Governance and Policy | AI Policy |
| New York Times on the Trump administration and AI models | Governance and Policy | AI Policy |
| OpenAI - Industrial Policy for the Intelligence Age | Governance and Policy | AI Policy |
| OpenAI: Introducing Trusted Access for Cyber | Governance and Policy | AI Policy |
| Our position on open-weights models | Governance and Policy | AI Policy |
| Own the Narrative - Leaked Flock Guide Shows How It Teaches Cops to Promote Its Tech | Governance and Policy | AI Policy |
| Pacing the Frontier - statement from frontier AI company employees | Governance and Policy | AI Policy |
| Pentagon Seeks $55 Billion for Drones and Autonomous Warfare in 2027 Budget | Governance and Policy | AI Policy |
| Policy on the AI Exponential | Governance and Policy | AI Policy |
| Promoting Advanced Artificial Intelligence Innovation and Security | Governance and Policy | AI Policy |
| Sen. Banks Recommends Oversight of Unreleased AI Models | Governance and Policy | AI Policy |
| SightBringer on the US government pausing Anthropic's Fable model - a sovereignty collision over frontier AI | Governance and Policy | AI Policy |
| Superintelligence Strategy - Expert Version PDF | Governance and Policy | AI Policy |
| Superintelligence Strategy - Hendrycks, Schmidt, Wang | Governance and Policy | AI Policy |
| Trump AI framework on open models - Axios | Governance and Policy | AI Policy |
| Trump AI framework to require 30-day government safety review for closed models, exempt open models | Governance and Policy | AI Policy |
| US to tell partners they must pick sides in AI race with China | Governance and Policy | AI Policy |
| Violations in the Shell: Exposing the Human Rights Costs of Generative AI - Amnesty International | Governance and Policy | AI Policy |
| White House reportedly completes frontier AI model review process, begins industry talks | Governance and Policy | AI Policy |
| Taking legal action to protect users of AI and small businesses | Governance and Policy | Legal |
| A Software Engineer Won a Religious Exemption From Using AI at Work | Governance and Policy | Legal |
| Apple v. OpenAI and io Products - motion for preliminary injunction over trade secret misappropriation | Governance and Policy | Legal |
| Canada walks back ban of Flipper Zero, targets 'illegitimate' use cases | Governance and Policy | Legal |
| chardet issue #327 - original author disputes relicensing of AI-assisted rewrite | Governance and Policy | Legal |
| DHS and DOJ Interim Final Rule - Counter-UAS Authority for State, Local, Tribal and Territorial Law Enforcement | Governance and Policy | Legal |
| DOJ charges three, including Supermicro cofounder, with diverting US AI servers to China | Governance and Policy | Legal |
| LLM + Clean Room: Will LLMs be the death of code copyrights | Governance and Policy | Legal |
| North Carolina Man Pleads Guilty to Music Streaming Fraud Aided by Artificial Intelligence - DOJ | Governance and Policy | Legal |
| OpenRouter Stealth Program EULA - terms for anonymous models and data training | Governance and Policy | Legal |
| SEC Charges SolarWinds and Chief Information Security Officer with Fraud, Internal Control Failures | Governance and Policy | Legal |
| Security Research Legal Defense Fund | Governance and Policy | Legal |
| Startup sues Palo Alto Networks' Koi Security over AI-hallucinated report falsely linking it to Chinese espionage | Governance and Policy | Legal |
| State Attorneys General letter to OpenAI over agent that escaped its sandbox and intruded on Hugging Face | Governance and Policy | Legal |
| Preparing for what's next: Windows security and resiliency innova | Governance and Policy | Security and Compliance |
| Meta's Llama Framework Flaw Exposes AI Systems to Remote Code Execu | Governance and Policy | Security and Compliance |
| What The Claude Code Leak Means for Engineering Teams in Regulated Industries | Governance and Policy | Security and Compliance |
| "Security Is Our Top Priority" is BS | Governance and Policy | Security and Compliance |
| An Overview of Google's Commitment to Secure by Design | Governance and Policy | Security and Compliance |
| Back to the Building Blocks: A Path Toward Secure and Measurable Software - ONCD Technical Report | Governance and Policy | Security and Compliance |
| Careful Adoption of Agentic AI Services - NSA cybersecurity information sheet | Governance and Policy | Security and Compliance |
| CISA BOD 26-04: Prioritizing Security Updates Based on Risk | Governance and Policy | Security and Compliance |
| CISA FY2024-2026 Cybersecurity Strategic Plan | Governance and Policy | Security and Compliance |
| CISA Secure by Design | Governance and Policy | Security and Compliance |
| CISA Secure Software Development Attestation Form | Governance and Policy | Security and Compliance |
| CISO Assistant - open-source GRC platform for risk management, compliance and audit | Governance and Policy | Security and Compliance |
| Claude Compliance API: Retrieve and delete chats, files, and projects | Governance and Policy | Security and Compliance |
| Delve at RSA 2026 LinkedIn post - comments call out fraudulent SOC 2 compliance reports | Governance and Policy | Security and Compliance |
| Delve CEO Karun Kaushik responds to allegations of fabricated compliance evidence | Governance and Policy | Security and Compliance |
| Delve, YC-backed AI compliance startup, accused of faking SOC 2 and ISO 27001 reports | Governance and Policy | Security and Compliance |
| DORA - Digital Operational Resilience Act | Governance and Policy | Security and Compliance |
| Drata Integrations - security and compliance automation platform | Governance and Policy | Security and Compliance |
| Drata's Acquisition of oak9 Ushers in New Era of Compliance as Code | Governance and Policy | Security and Compliance |
| Evaluation of NIST's Management of the National Vulnerability Database - Commerce OIG Report | Governance and Policy | Security and Compliance |
| FedRAMP CSP Vulnerability Scanning Requirements | Governance and Policy | Security and Compliance |
| filegrc - Git and file-based SOC 2 | Governance and Policy | Security and Compliance |
| Gergely Orosz: Context.ai's SOC2 audit by Delve and its trust page redirecting to Delve | Governance and Policy | Security and Compliance |
| grclanker - terminal-first compliance evidence agent with CMVP, KEV and EPSS lookups | Governance and Policy | Security and Compliance |
| Hard Truths Your CISO Won't Tell You - slide deck | Governance and Policy | Security and Compliance |
| JPMorganChase - An open letter to third-party suppliers on SaaS security | Governance and Policy | Security and Compliance |
| Kviklet - pull request-style review and approval flow for database access | Governance and Policy | Security and Compliance |
| Microsoft Secure Future Initiative - secure by design | Governance and Policy | Security and Compliance |
| MITRE Security Automation Framework - SAF | Governance and Policy | Security and Compliance |
| National Cybersecurity Strategy 2023 | Governance and Policy | Security and Compliance |
| OMB M-22-09: Moving the U.S. Government Toward Zero Trust Cybersecurity Principles | Governance and Policy | Security and Compliance |
| Opportunities for AI in cyber defence - NZ NCSC guidance | Governance and Policy | Security and Compliance |
| Restricting access to GitHub.com using a corporate proxy - GitHub Enterprise Cloud Docs | Governance and Policy | Security and Compliance |
| SEC Charges Four Companies With Misleading Cyber Disclosures | Governance and Policy | Security and Compliance |
| Securing the Future: Mitigating Data Security Concerns in Artificial Intelligence Models - ISACA Journal | Governance and Policy | Security and Compliance |
| Security is a Vendor Assessment Problem - Jonathan Price | Governance and Policy | Security and Compliance |
| Sierra launches PCI-compliant payments for AI agents | Governance and Policy | Security and Compliance |
| SOC 2 Compliance Guide | Governance and Policy | Security and Compliance |
| Tackling the National Gap in Software Understanding - CISA | Governance and Policy | Security and Compliance |
| The AI Vulnerability Storm: Building a Mythos-ready Security Program - CSA, SANS and OWASP briefing | Governance and Policy | Security and Compliance |
| The Case for Memory Safe Roadmaps - CISA, NSA, FBI and partners | Governance and Policy | Security and Compliance |
| U.S. Regulators Pause Cybersecurity Bank Exams Due to Mythos | Governance and Policy | Security and Compliance |
| U.S. to roll out 'Cyber Trust Mark' label on secure devices starting this year - NBC News | Governance and Policy | Security and Compliance |
| United States Files Suit Against Georgia Tech Alleging Cybersecurity Violations | Governance and Policy | Security and Compliance |
| vcs-access-review - auditor-ready GitHub org access review reports for SOC2 | Governance and Policy | Security and Compliance |
| Algorithm Aversion: People Erroneously Avoid Algorithms After Seeing Them Err | Governance and Policy | Trust and Adoption |
| Content Authenticity Initiative - open-source tools for content authenticity and provenance | Governance and Policy | Trust and Adoption |
| Lower Artificial Intelligence Literacy Predicts Greater AI Receptivity | Governance and Policy | Trust and Adoption |
| The Tragedy of the Cognitive Commons: How AI Could Disrupt the Regeneration of Professional Expertise | Governance and Policy | Trust and Adoption |
| Thinking - Fast, Slow, and Artificial: How AI is Reshaping Human Reasoning and the Rise of Cognitive Surrender | Governance and Policy | Trust and Adoption |
| Thinking—Fast, Slow, and Artificial: How AI is Reshaping Human Reasoning and the Rise of Cognitive Surrender | Governance and Policy | Trust and Adoption |
| vx-underground on Jira and Confluence training AI on your data unless you opt out by August 17 | Governance and Policy | Trust and Adoption |
| Go Beyond Chat: Make AI actually do things. | Governance and Policy | Miscellaneous |
| MLX: An array framework for Apple silicon | Governance and Policy | Miscellaneous |
| Order a Framework Desktop with AMD Ryzen™ AI Max 300 | Governance and Policy | Miscellaneous |
| Transforming Threat Modeling: Harnessing ChatGPT for Automated Secu | Governance and Policy | Miscellaneous |
| Flock Updates Privacy, Accountability, Security, and Transparency Safeguards | Governance and Policy | Miscellaneous |
| United States Cyber Force - FDD report on creating a US Cyber Force | Governance and Policy | Miscellaneous |
| CSA MAESTRO Framework | Threat Modeling | Frameworks |
| Threat Modeling OpenAI Responses API with MAESTRO | Threat Modeling | Frameworks |
| AI Defense Framework | Threat Modeling | Frameworks |
| CMS Threat Modeling Handbook | Threat Modeling | Frameworks |
| Continuous TRAIL - maintaining threat models across the SDLC | Threat Modeling | Frameworks |
| Future-Back Threat Modeling: A Foresight-Driven Security Framework | Threat Modeling | Frameworks |
| Soatok's Informal Guide to Threat Models | Threat Modeling | Frameworks |
| SQOUT: A Risk-Based Threat Analysis Framework for Quantum Communication Systems | Threat Modeling | Frameworks |
| Standardized Threat Taxonomy for AI Security, Governance, and Regulatory Compliance | Threat Modeling | Frameworks |
| Threat modeling the TRAIL of Bits way | Threat Modeling | Frameworks |
| Threat Modeling with ATT&CK | Threat Modeling | Frameworks |
| Threat Modeling: Designing for Security in an AI World - second edition announcement | Threat Modeling | Frameworks |
| threats - an extensive list of threat modelling resources | Threat Modeling | Frameworks |
| NCC Group - Analyzing AI Application Threat Models | Threat Modeling | Threat Models |
| Analyzing AI Application Threat Models | Threat Modeling | Threat Models |
| OpenClaw Threat Model | Threat Modeling | Threat Models |
| NCC Group - Role-Specific Impact of Prompt Injection | Threat Modeling | Threat Models |
| Attack modeling a forgotten password system - an actionable evolution of threat modeling | Threat Modeling | Threat Models |
| DevOps threat matrix - Microsoft Security Blog | Threat Modeling | Threat Models |
| How Threat Modeling Could Have Prevented the $1.5B Bybit Hack | Threat Modeling | Threat Models |
| RAG Security and Privacy: Formalizing the Threat Model and Attack Surface | Threat Modeling | Threat Models |
| Security Threats Against Space Missions - CCSDS Informational Report | Threat Modeling | Threat Models |
| The Universal Cloud Threat Model | Threat Modeling | Threat Models |
| Threat Modeling of Threat Modeling | Threat Modeling | Threat Models |
| CLI tool for Continuous Threat Modeling | Threat Modeling | Tools |
| A CLI tool for threat modeling and v | Threat Modeling | Tools |
| mcp-scan toxic flow analysis / lethal-trifecta threat modeling | Threat Modeling | Tools |
| AI featured threat modeli | Threat Modeling | Tools |
| ai-security-analyzer - AI-generated security docs and threat models | Threat Modeling | Tools |
| Bex AI Demo: A Secure by Design Tool - IriusRisk | Threat Modeling | Tools |
| Deep Analysis Mode in AI Security Analyzer | Threat Modeling | Tools |
| Devici - Continuous Threat Modeling | Threat Modeling | Tools |
| Gram - Klarna's threat model diagramming tool | Threat Modeling | Tools |
| nexTM - threat modeling tool for agile software development | Threat Modeling | Tools |
| Security Compass and AI - SD Elements parsing free-text requirements docs | Threat Modeling | Tools |
| Seezo - Automated Security Design Reviews at Scale | Threat Modeling | Tools |
| Threat Modeling STRIDE Template for Miro | Threat Modeling | Tools |
| threat-composer - AWS threat modeling tool with AI-assisted CLI and MCP server | Threat Modeling | Tools |
| threatcl - formerly hcltm - Documenting your Threat Models with HCL | Threat Modeling | Tools |
| What's New in SD Elements 2024.4 | Threat Modeling | Tools |
| TM-Bench: Threat Modeling Benchmark | Threat Modeling | Benchmarks and Research |
| Leveraging LLMs for Threat Modeling - Claude 3 Opus vs GPT-4 | Threat Modeling | Benchmarks and Research |
| ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applications | Threat Modeling | Benchmarks and Research |
| Empirical assessment of the perception of graphical threat model acceptability | Threat Modeling | Benchmarks and Research |
| Human-Centered Threat Modeling in Practice: Lessons, Challenges, and Paths Forward | Threat Modeling | Benchmarks and Research |
| Scaling Threat Modeling with AI: Generating 1000 Threat Models Using Gemini 2.0 and AI Security Analyzer | Threat Modeling | Benchmarks and Research |
| State of Threat Modeling Report 2024-25 - Threat Modeling Connect | Threat Modeling | Benchmarks and Research |
| TM-Bench - LLM threat modeling benchmark | Threat Modeling | Benchmarks and Research |
| NCC Group - Analyzing Secure AI Architectures | Architecture | Design Principles and Patterns |
| Microsoft - Best Practices to Architect Secure GenAI Applications | Architecture | Design Principles and Patterns |
| NCC Group - Analyzing Secure AI Design Principles | Architecture | Design Principles and Patterns |
| Simon Willison - Dual LLM Pattern | Architecture | Design Principles and Patterns |
| Simon Willison - CAMEL | Architecture | Design Principles and Patterns |
| awesome-secure-defaults - secure-by-default libraries that eliminate bug classes | Architecture | Design Principles and Patterns |
| Beyond Zero: Enterprise security for the AI era | Architecture | Design Principles and Patterns |
| Designing Patterns to Prevent IDOR | Architecture | Design Principles and Patterns |
| Misty Programming Language: Security - capability discipline and the policy machine | Architecture | Design Principles and Patterns |
| Shifting the Balance of Cybersecurity Risk - Principles and Approaches for Security-by-Design and -Default | Architecture | Design Principles and Patterns |
| Tackling cybersecurity vulnerabilities through Secure by Design - Google | Architecture | Design Principles and Patterns |
| The Rule Of 2 - Chromium's security rule for handling untrustworthy inputs | Architecture | Design Principles and Patterns |
| Agent-native Architectures: How to Build Apps After Code Ends | Architecture | AI System Architectures |
| fleetwood.dev | Architecture | AI System Architectures |
| SPQA: The AI-based Architecture That'll Replace Most Existing Software | Architecture | AI System Architectures |
| CrowdStrike and NVIDIA Unveil Secure-by-Design AI Blueprint for AI Agents | Architecture | AI System Architectures |
| Arcanum Security - PI Taxonomy | Prompt Injection | Prompt Injection Taxonomy |
| L1B3RT4S | Prompt Injection | Prompt Injection Taxonomy |
| CrowdStrike Prompt Injection Taxonomy Poster | Prompt Injection | Prompt Injection Taxonomy |
| Lakera PINT Benchmark | Prompt Injection | Prompt Injection Benchmarks and Tools |
| GenTel Safe | Prompt Injection | Prompt Injection Benchmarks and Tools |
| HiddenLayer - Evaluating PI Datasets | Prompt Injection | Prompt Injection Benchmarks and Tools |
| Microsoft BIPIA | Prompt Injection | Prompt Injection Benchmarks and Tools |
| Promptfoo | Prompt Injection | Prompt Injection Benchmarks and Tools |
| erjiaxiao/Typographic-Visual-Prompt-Injection-Dataset · Datasets a | Prompt Injection | Prompt Injection Benchmarks and Tools |
| Lakera/mosscap_prompt_injection · Datasets at Hugging Face | Prompt Injection | Prompt Injection Benchmarks and Tools |
| AgentDojo - dynamic environment for evaluating prompt injection attacks and defenses in LLM agents | Prompt Injection | Prompt Injection Benchmarks and Tools |
| ASCII Smuggler - Crafting Invisible Text and Decoding Hidden Secrets | Prompt Injection | Prompt Injection Benchmarks and Tools |
| Damn Vulnerable LLM Agent - vulnerable ReAct agent for practicing prompt injection | Prompt Injection | Prompt Injection Benchmarks and Tools |
| GPT Prompt Attack - prompt injection game | Prompt Injection | Prompt Injection Benchmarks and Tools |
| LLMMap - automated prompt injection testing framework, sqlmap-style | Prompt Injection | Prompt Injection Benchmarks and Tools |
| Qualifire PI Benchmark | Prompt Injection | Prompt Injection Datasets |
| Prompt Injection Attack Dataset | Prompt Injection | Prompt Injection Datasets |
| Prompt Injections (yanismiraoui) | Prompt Injection | Prompt Injection Datasets |
| Prompt Injection Safety (jayavibhav) | Prompt Injection | Prompt Injection Datasets |
| Prompt Injection (jayavibhav) | Prompt Injection | Prompt Injection Datasets |
| Prompt Injections (deepset) | Prompt Injection | Prompt Injection Datasets |
| HackAPrompt Dataset | Prompt Injection | Prompt Injection Datasets |
| INJECAGENT: Benchmarking Indirect Prompt Injections in Tool-Integrated LLM Agents | Prompt Injection | Prompt Injection Research |
| OET: Optimization-based Prompt Injection Evaluation Toolkit | Prompt Injection | Prompt Injection Research |
| Benchmarking and Defending Against Indirect Prompt Injection Attacks on LLMs | Prompt Injection | Prompt Injection Research |
| Security of Internet of Agents: Attacks and Countermeasures | Prompt Injection | Prompt Injection Research |
| Base Models Beat Aligned Models at Randomness and Creativity | Prompt Injection | Prompt Injection Research |
| Trust No AI: Prompt Injection Along The CIA Security Triad | Prompt Injection | Prompt Injection Research |
| AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attac | Prompt Injection | Prompt Injection Research |
| The Landscape of Prompt Injection Threats in LLM Agents: From Taxonomy to Analysis | Prompt Injection | Prompt Injection Research |
| Learning to Inject: Automated Prompt Injection via Reinforcement Learning | Prompt Injection | Prompt Injection Research |
| Exposing the Systematic Vulnerability of Open-Weight Models to Prefill Attacks | Prompt Injection | Prompt Injection Research |
| Agent Commander: Promptware-Powered Command and Control | Prompt Injection | Prompt Injection Research |
| Brainworm - promptware hiding in your context window via CLAUDE.md memory files | Prompt Injection | Prompt Injection Research |
| greshake/llm-security - indirect prompt injection attacks on app-integrated LLMs | Prompt Injection | Prompt Injection Research |
| Here Comes the AI Worm | Prompt Injection | Prompt Injection Research |
| Invitation Is All You Need - promptware attacks against LLM-powered assistants in production | Prompt Injection | Prompt Injection Research |
| New prompt injection papers: Agents Rule of Two and The Attacker Moves Second | Prompt Injection | Prompt Injection Research |
| Prompt Injection as Role Confusion - ICML 2026 project page | Prompt Injection | Prompt Injection Research |
| QueryIPI: Query-agnostic Indirect Prompt Injection on Coding Agents | Prompt Injection | Prompt Injection Research |
| Weaponizing image scaling against production AI systems | Prompt Injection | Prompt Injection Research |
| Defeating Prompt Injections by Design | Prompt Injection | Prompt Injection Architecture |
| The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions | Prompt Injection | Prompt Injection Architecture |
| Llama Guard | Prompt Injection | Prompt Injection Prevention and Detection |
| Wozway | Prompt Injection | Prompt Injection Prevention and Detection |
| OpenShield | Prompt Injection | Prompt Injection Prevention and Detection |
| LLMInspect Gateway | Prompt Injection | Prompt Injection Prevention and Detection |
| Lasso Security | Prompt Injection | Prompt Injection Prevention and Detection |
| Lakera | Prompt Injection | Prompt Injection Prevention and Detection |
| Prompt Security | Prompt Injection | Prompt Injection Prevention and Detection |
| Troj.ai | Prompt Injection | Prompt Injection Prevention and Detection |
| Trust3.ai | Prompt Injection | Prompt Injection Prevention and Detection |
| PAIG | Prompt Injection | Prompt Injection Prevention and Detection |
| OpenLIT | Prompt Injection | Prompt Injection Prevention and Detection |
| claude-hooks/.claude/skills/prompt-injection-defender/patterns.yaml | Prompt Injection | Prompt Injection Prevention and Detection |
| New Malware Embeds Prompt Injection to Evade AI Detection - Check P | Prompt Injection | Prompt Injection Prevention and Detection |
| Proactive prompt injection de | Prompt Injection | Prompt Injection Prevention and Detection |
| Rebuff.ai - Prompt Injection Detector | Prompt Injection | Prompt Injection Prevention and Detection |
| Continuously hardening ChatGPT Atlas against prompt injection attacks | Prompt Injection | Prompt Injection Prevention and Detection |
| PhantomLint: Principled Detection of Hidden LLM Prompts in Structured Documents | Prompt Injection | Prompt Injection Prevention and Detection |
| A GitHub Issue Title Compromised 4,000 Developer Machines | Prompt Injection | Prompt Injection General |
| Introducing Augustus: Open Source LLM Prompt Injection Tool | Prompt Injection | Prompt Injection General |
| Prompt Injection Inside GitHub Actions: The New Frontier of Supply | Prompt Injection | Prompt Injection General |
| Unseeable prompt injections in screenshots: more vulnerabilities in | Prompt Injection | Prompt Injection General |
| Prompt injection engineering for attackers: Exploiting GitHub Copilot | Prompt Injection | Prompt Injection General |
| qualifire/prompt-injection-jailbreak-sentinel-v2 · Hugging Face | Prompt Injection | Prompt Injection General |
| Prompt Injection Taxonomy - Pangea | Prompt Injection | Prompt Injection General |
| Agentic Browser Security: Indirect Prompt Injection in Perplexity C | Prompt Injection | Prompt Injection General |
| GitHub Copilot RCE Vulnerability via Prompt Injection Enables Full | Prompt Injection | Prompt Injection General |
| How we estimate the risk from prompt injection attacks on AI systems | Prompt Injection | Prompt Injection General |
| Prompt injection is fascinating\.\.\.\. 🧐 | Prompt Injection | Prompt Injection General |
| Code for the paper | Prompt Injection | Prompt Injection General |
| Prompt injection and jailbreaking are not the same thing | Prompt Injection | Prompt Injection General |
| Improving LLM Security Against Prompt Injection: AppSec Guidance Fo | Prompt Injection | Prompt Injection General |
| Prompt Injection Primer for Engineers | Prompt Injection | Prompt Injection General |
| automatically tests prompt injection at | Prompt Injection | Prompt Injection General |
| Gandalf - Lakera - Prompt injection | Prompt Injection | Prompt Injection General |
| Inject My PDF: Prompt Injection for your Resume | Prompt Injection | Prompt Injection General |
| Prompt injection: what's the worst that can happen? | Prompt Injection | Prompt Injection General |
| Claude Cowork Exfiltrates Files | Prompt Injection | Prompt Injection General |
| Superhuman AI Exfiltrates Emails | Prompt Injection | Prompt Injection General |
| By the way the Elgato Prompter is a perfect screen for Claude | Prompt Injection | Prompt Injection General |
| 'PromptQuest' is the worst game of 2025. You play it with AI | Prompt Injection | Prompt Injection General |
| Call for Papers | Prompt Injection | Prompt Injection General |
| Google Antigravity Exfiltrates Data - SquareDocs | Prompt Injection | Prompt Injection General |
| ChatGPT Atlas Agent System prompt You are ChatGPT, a large language model | Prompt Injection | Prompt Injection General |
| PromptIntel - IoPC Registry | Prompt Injection | Prompt Injection General |
| Introducing PromptIntel | Prompt Injection | Prompt Injection General |
| Intro - Promptfoo | Prompt Injection | Prompt Injection General |
| LM Security Database | Prompt Injection | Prompt Injection General |
| Testing tool to evaluate Pa | Prompt Injection | Prompt Injection General |
| \#ESETResearch has discovered the first known AI\-powered ransomware, which we named \#PromptLock\. | Prompt Injection | Prompt Injection General |
| Prompt Engineering | Prompt Injection | Prompt Injection General |
| This script automates SQL injection tes | Prompt Injection | Prompt Injection General |
| gpt-5 leaked system prompt | Prompt Injection | Prompt Injection General |
| SentinelOne announces Prompt Security acquisition, expands into Gen | Prompt Injection | Prompt Injection General |
| The New Skill in AI is Not Prompting, It's Context Engineering | Prompt Injection | Prompt Injection General |
| Hackaprompt 2.0 | Prompt Injection | Prompt Injection General |
| How I Use AI: Meet My Promptly Hired Model Intern | Prompt Injection | Prompt Injection General |
| OpenRouter | Prompt Injection | Prompt Injection General |
| Prompt Caching (beta) - Anthropic | Prompt Injection | Prompt Injection General |
| Focus on prompting and generating | Prompt Injection | Prompt Injection General |
| GitHub Issue as ChatGPT Prompt; ChatGPT's | Prompt Injection | Prompt Injection General |
| timdettmers/guanaco-33b-merged · Hugging Face | Prompt Injection | Prompt Injection General |
| Prompt Engineering Jobs | Prompt Injection | Prompt Injection General |
| PromptBase - Prompt Marketplace: DALL·E, Midjourney, ChatGPT, Stabl | Prompt Injection | Prompt Injection General |
| CloudSec - Agent Skill Injection offensive technique | Prompt Injection | Prompt Injection General |
| GPT-4 Vision GPT-4V Prompt Injection | Prompt Injection | Prompt Injection General |
| Gynvael on asking ChatGPT to reveal its dalle.text2im arguments and tool JSON | Prompt Injection | Prompt Injection General |
| InjectGPT: the most polite exploit ever | Prompt Injection | Prompt Injection General |
| Joseph Thacker on invisible prompt injection via unicode tags in GPT-4 | Prompt Injection | Prompt Injection General |
| jqwik issue: printMessageForCodingAgents - test output visible to AI agents, invisible to humans | Prompt Injection | Prompt Injection General |
| LaNyer640/test1 - in-the-wild GitHub README prompt injection payload telling agents to curl a remote host | Prompt Injection | Prompt Injection General |
| Mitchell Hashimoto poisons AGENTS.md with prompt injections to catch unreviewed AI code | Prompt Injection | Prompt Injection General |
| Role confusion: one more reason we can't trust LLMs | Prompt Injection | Prompt Injection General |
| Smuggling arbitrary data through an emoji | Prompt Injection | Prompt Injection General |
| The Comprehensive Guide to Prompt Injection Attacks in 2026 - Sysdig | Prompt Injection | Prompt Injection General |
| obliterate the chains that bind | Jailbreaking | Resources |
| The Chinese OBLITERATED OpenAI. A side-by-side comparison of DeepSe | Jailbreaking | Resources |
| APpaREnTLy THiS iS hoW yoU JaIlBreAk AI | Jailbreaking | Resources |
| From the ChatGPT community on Reddit: The riddle jailbreak is extre | Jailbreaking | Resources |
| ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs | Jailbreaking | Resources |
| Jailbreaking LLM (ChatGPT) Sandboxes Using Linguistic Hacks — Force | Jailbreaking | Resources |
| Boundary Point Jailbreaking of Black-Box LLMs | Jailbreaking | Resources |
| Large Language Lobotomy: Jailbreaking Mixture-of-Experts via Expert Silencing | Jailbreaking | Resources |
| META MUSE SPARK - FULL SYSTEM PROMPT | Jailbreaking | Resources |
| A one-prompt attack that breaks LLM safety alignment - Microsoft Security | Jailbreaking | Resources |
| Apparently This Is How You Jailbreak AI - 404 Media on Anthropic's Best-of-N automated jailbreaking | Jailbreaking | Resources |
| ChatGPT DAN Jailbreak prompts gist | Jailbreaking | Resources |
| ChatGPT Guessing Game Leads To Users Extracting Free Windows OS Keys and More | Jailbreaking | Resources |
| CL4R1T4S - Leaked Claude Fable 5 system prompt from Pliny's system prompt collection | Jailbreaking | Resources |
| dealignai Gemma-4-31B-JANG_4M-CRACK - de-aligned Gemma 4 model on Hugging Face | Jailbreaking | Resources |
| G0DM0D3 - multi-model jailbreak prompt racing tool using L1B3RT4S prompts | Jailbreaking | Resources |
| G0DM0D3 - Pliny's open-source multi-model liberated chat interface for red teaming | Jailbreaking | Resources |
| Jailbreaker: LLM Jailbreak Testing You Can Actually Repeat - SpecterOps | Jailbreaking | Resources |
| LaurieWired on the typoglycemia jailbreak using transposed-letter text to bypass LLM filters | Jailbreaking | Resources |
| Pliny leaks the Claude Design system prompt | Jailbreaking | Resources |
| Pliny on using his repos as initial context - the repo is the jailbreak | Jailbreaking | Resources |
| Pliny the Liberator on a guardrail-removed OBLITERATED Gemma 4 E4B model | Jailbreaking | Resources |
| Pliny the Liberator on how to leak a system prompt - authority framing and continuation loops | Jailbreaking | Resources |
| Pliny the Liberator on jailbreaking Anthropic's Fable-5 model | Jailbreaking | Resources |
| trustmebro - bypass LLM guardrails with fabricated tool output | Jailbreaking | Resources |
| VaultBreak Daily Jailbreak | Jailbreaking | Resources |
| Bias Injection Attacks on RAG Databases and Sanitization Defenses | Model Attacks | Data Poisoning |
| Data Poisoning Vulnerabilities Across Healthcare AI Architectures: A Security Threat Analysis | Model Attacks | Data Poisoning |
| Eyes-on-Me: Scalable RAG Poisoning through Transferable Attention-Steering Attractors | Model Attacks | Data Poisoning |
| Layer of Truth: Probing Belief Shifts under Continual Pre-Training Poisoning | Model Attacks | Data Poisoning |
| Nightshade, the free tool that 'poisons' AI models, is now available for artists to use | Model Attacks | Data Poisoning |
| Stack Overflow for AI Agents Sounds Great Until Someone Poisons the Answers | Model Attacks | Data Poisoning |
| Virus Infection Attack on LLMs: Your Poisoning Can Spread VIA Synthetic Data | Model Attacks | Data Poisoning |
| AutoBackdoor: Automating Backdoor Attacks via LLM Agents | Model Attacks | Backdoors and Trojans |
| BackWeak: Backdooring Knowledge Distillation Simply with Weak Triggers and Fine-tuning | Model Attacks | Backdoors and Trojans |
| CacheTrap: Injecting Trojans in LLMs without Leaving any Traces in Inputs or Weights | Model Attacks | Backdoors and Trojans |
| Chain-of-Scrutiny: Detecting Backdoor Attacks for Large Language Models | Model Attacks | Backdoors and Trojans |
| How to Backdoor Large Language Models - BadSeek | Model Attacks | Backdoors and Trojans |
| Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain | Model Attacks | Backdoors and Trojans |
| Pay Attention to the Triggers: Constructing Backdoors That Survive Distillation | Model Attacks | Backdoors and Trojans |
| Persistent Backdoor Attacks under Continual Fine-Tuning of LLMs | Model Attacks | Backdoors and Trojans |
| Rethinking Backdoor Detection Evaluation for Language Models | Model Attacks | Backdoors and Trojans |
| ShadowLogic: Backdoors in Any Whitebox LLM | Model Attacks | Backdoors and Trojans |
| ToxScreen: Detecting Whether an LLM Has Been Poisoned | Model Attacks | Backdoors and Trojans |
| Watch Out for the Lifespan: Evaluating Backdoor Attacks Against Federated Model Adaptation | Model Attacks | Backdoors and Trojans |
| Your Open Source Model Could Have a Hidden Time-Release Backdoor | Model Attacks | Backdoors and Trojans |
| A Systematic Study of Model Extraction Attacks on Graph Foundation Models | Model Attacks | Model Extraction and Stealing |
| delta-STEAL: LLM Stealing Attack with Local Differential Privacy | Model Attacks | Model Extraction and Stealing |
| Detecting and preventing distillation attacks | Model Attacks | Model Extraction and Stealing |
| HN comment on Chinese resellers offering Claude tokens 70-90% off and selling reasoning traces as training data | Model Attacks | Model Extraction and Stealing |
| Michael Kratsios: Moonshot AI covertly distilled Anthropic's Fable to build its K3 model | Model Attacks | Model Extraction and Stealing |
| Ox Alpha is GLM - reverse engineering a stealth OpenRouter model via prompt injection | Model Attacks | Model Extraction and Stealing |
| Stolen Thoughts - Stealing Reasoning Traces from Proprietary LLM APIs | Model Attacks | Model Extraction and Stealing |
| Beyond the Board: Exploring AI Robustness Through Go | Model Attacks | Adversarial Examples |
| Certified but Fooled! Breaking Certified Defences with Ghost Certificates | Model Attacks | Adversarial Examples |
| PReMA - adversarial image attack exploiting text-image misalignment in multi-modal diffusion models | Model Attacks | Adversarial Examples |
| Special-Character Adversarial Attacks on Open-Source Language Model | Model Attacks | Adversarial Examples |
| This adversarial pattern can prevent surveillance cameras from detecting you | Model Attacks | Adversarial Examples |
| StealthGPT - AI humanizer and undetectable AI writer | Model Attacks | Watermarking Attacks |
| watermarks-remover - strips AI watermarks from content you own | Model Attacks | Watermarking Attacks |
| Zero-dependency MCP server implementation. | Supply Chain | Resources |
| model-signing | Supply Chain | Resources |
| Supply chain security for ML | Supply Chain | Resources |
| Design WIP Market Report AI Security - Final.pdf | Supply Chain | Resources |
| Axios Developer Tool Compromise | Supply Chain | Resources |
| 11 minutes was all it took to hack GitHub - poisoned nx console VS Code extension by teampcp | Supply Chain | Resources |
| 20 Days Later: Trivy Compromise, Act II | Supply Chain | Resources |
| 3CX Software Supply Chain Compromise Investigation - Mandiant | Supply Chain | Resources |
| 8 Million Requests Later, We Made The SolarWinds Supply Chain Attack Look Amateur | Supply Chain | Resources |
| @ctrl/tinycolor Supply Chain Attack Post-mortem | Supply Chain | Resources |
| A backdoor in xz - LWN | Supply Chain | Resources |
| A Comprehensive Study on the Impact of Vulnerable Dependencies on Open-Source Software | Supply Chain | Resources |
| A New Kali Linux Archive Signing Key | Supply Chain | Resources |
| A Reality Check on SBOM-based Vulnerability Management: An Empirical Study and A Path Forward | Supply Chain | Resources |
| Abusing Go's infrastructure | Supply Chain | Resources |
| ActionsCacheBlasting - GitHub Actions cache poisoning proof-of-concept | Supply Chain | Resources |
| Adnan Khan finds another GitHub Action compromised like tj-actions/changed-files | Supply Chain | Resources |
| Adnan Khan on TeamPCP backdooring the Checkmarx Jenkins AST plugin with Dune-themed malware | Supply Chain | Resources |
| Agent of Chaos: Hijacking NodeJS's Jenkins Agents | Supply Chain | Resources |
| ai-bom - AI Bill of Materials scanner to discover every AI agent, model and API in your infrastructure | Supply Chain | Resources |
| Aikido Intel - Real-time vulnerability and malware intelligence for open source packages | Supply Chain | Resources |
| Akrites - Coordinated, confidential vulnerability remediation for open source software | Supply Chain | Resources |
| Announcing Chalk Alpha - open-source software provenance | Supply Chain | Resources |
| Announcing the deps.dev API: critical dependency data for secure supply chains | Supply Chain | Resources |
| Anton on building an LLM-powered supply chain audit system with Claude - ClaudeForBlueTeam Day 16 | Supply Chain | Resources |
| Anza on the @solana/web3.js npm compromise pushing malicious versions 1.95.6 and 1.95.7 | Supply Chain | Resources |