β˜… NO REAL MONEY β˜… Will an AI browser agent be shown exfiltrating user data via prompt in β€” YES 70.0% β—† INTEL: TPM-JS - experiment with a software TPM in your browser β—† Will $POC ever be worth anything? β€” NO 99.9% β—† Will an executive literally say 'it's priced in' about a breach on an β€” NO 85.0% β—† Will a global Cloudflare, AWS, or Azure outage lasting over 3 hours be β€” YES 55.0% β—† INTEL: The Bitter Lesson of Tool Calling β—† Will a CVSS 9.0+ RCE be disclosed in a major AI coding agent before 20 β€” YES 80.5% β—† INTEL: Christopher Stanley on the Cyberhaven breach - malicious Chrome extension and IO β—† Which AI lab discloses the next headline security incident? β€” OpenAI 46.2% β—† Will a leaked system prompt lead to a public apology from a major AI l β€” NO 70.0% β—† INTEL: VaultBreak Daily Jailbreak β—† Will a jailbreak prompt sell as an NFT for more than 1 ETH before 2027 β€” NO 95.0% β—† Will itspricedin.lol itself get pwned within 90 days of launch? β€” YES 99.1% β—† INTEL: API Security Testing Using AI in Postman - Dana Epp β—† INTEL: The VIM side of my brain desperately wanted to connect with my β—† INTEL: An AI-powered agentic red team framewor β—† Will AI-generated bug reports cause a major open-source project to shu β€” YES 55.0% β—† Will a prompt injection attack be publicly blamed for a data breach at β€” YES 62.0% β—† Will a major password manager disclose a CVSS 9.0+ vulnerability befor β€” NO 60.0% β—† INTEL: Bypassing the AWS WAF Protection with an 8KB Bullet β—† β˜… $POC HAS NO VALUE β˜… β—†
πŸ•΅οΈ Intel feed β€” 5660 resources from the ai-security compendium
Clear

Categories: Agent Frameworks Β· Agent Identity Β· Agent Security Β· Anti-Crawling Β· Architecture Β· Benchmarks Β· Code Analysis Β· Coding Tools Β· Detection and Monitoring Β· Engineering Patterns Β· Frameworks and Standards Β· General Reading Β· Governance and Policy Β· Guardrails and Firewalls Β· Honeypots and Deception Β· Incidents Β· Jailbreaking Β· MCP (Model Context Protocol) Β· Model Attacks Β· Papers Β· Privacy Β· Prompt Injection Β· Red Teaming Β· Safety and Alignment Β· Sandboxing and Isolation Β· Secrets Management Β· Secure Coding Β· Supply Chain Β· Threat Modeling

Showing 138 of 138. Source: github.com/AnthonyHerman/ai-security-corpus Β· browse it in Internet Explorer. This is the research; the markets are the bets.

Snapshot 2026-10-10 Β· last checked 2026-10-13 14:25 UTC Β· NEW = added in the last 14 days (nothing fresh this fortnight; the bugs are resting)

TitleCategorySection
Responsible AI in Enterprise Applications: A Practitioner's ViewGovernance and PolicyEnterprise Governance
A Strategic Framework for AI Product Development and Evaluation in Enterprise SoftwareGovernance and PolicyEnterprise Governance
Blueprints of Trust: AI System Cards for End to End Transparency and GovernanceGovernance and PolicyEnterprise Governance
CISO MindMap 2024: What do InfoSec Professionals Really DoGovernance and PolicyEnterprise Governance
Enterprise AI Governance at Snowflake: Balancing Innovation and Risk - slidesGovernance and PolicyEnterprise Governance
Enterprise AI security posture for coding tools - r/devsecopsGovernance and PolicyEnterprise Governance
GitHub Copilot: Enterprise team specialization for managed settingsGovernance and PolicyEnterprise Governance
Golf - AI governance and shadow AI discovery platformGovernance and PolicyEnterprise Governance
Introducing VibeGuard: AI Security and GovernanceGovernance and PolicyEnterprise Governance
Team8 - Generative AI and ChatGPT Enterprise RisksGovernance and PolicyEnterprise Governance
The anecdotes AI GRC ToolkitGovernance and PolicyEnterprise Governance
VS Code for enterprise - centrally managing settings, extensions and AI policiesGovernance and PolicyEnterprise Governance
What policies are you writing or considering for GPT-4 - r/cybersecurityGovernance and PolicyEnterprise Governance
The Generative AI Policy Landscape in Open SourceGovernance and PolicyAI Policy
Contributions policy Β· Issue #7695 Β· tldraw/tldrawGovernance and PolicyAI Policy
Generative AI Policy - Asahi Linux DocumentationGovernance and PolicyAI Policy
Our First Generalist PolicyGovernance and PolicyAI Policy
Updates to Consumer Terms and Privacy PolicyGovernance and PolicyAI Policy
IBB Policy Update: AI-Assisted SubmissionsGovernance and PolicyAI Policy
A Flock license plate reader linked a San Diego man to a violent crime - he was five miles awayGovernance and PolicyAI Policy
A Pro-Innovation Approach to AI Regulation - UK Government White PaperGovernance and PolicyAI Policy
AI 2040: Plan A - A forecast and policy plan for navigating superintelligenceGovernance and PolicyAI Policy
AI for Wisconsin - KC Streich write-in campaign for AI-assisted governanceGovernance and PolicyAI Policy
AI Now 2025 Landscape ReportGovernance and PolicyAI Policy
Altman says OpenAI agrees with Anthropic's red lines in Pentagon disputeGovernance and PolicyAI Policy
Anthropic joins RAISE US, a nonprofit AI workforce coalitionGovernance and PolicyAI Policy
Anthropic says capability cited by US in restricting Fable 5 is already available from other modelsGovernance and PolicyAI Policy
Anthropic statement on US government directive to suspend access to Fable 5 and Mythos 5Governance and PolicyAI Policy
Arnaud Bertrand on Palantir's AI sovereignty narrative and closed-model economicsGovernance and PolicyAI Policy
Automation Without Understanding - AI mathematical capability as strategic vulnerabilityGovernance and PolicyAI Policy
bdsqlsz on Reuters misrepresenting China's tiered plan to restrict access to frontier AI modelsGovernance and PolicyAI Policy
Bindu Reddy on India requiring government approval to deploy GenAI modelsGovernance and PolicyAI Policy
Blueprint for an AI Bill of RightsGovernance and PolicyAI Policy
China considers restricting overseas access to cutting-edge AI models, citing cyberattack concernsGovernance and PolicyAI Policy
CISA Gold Eagle: Advancing AI-Driven Vulnerability ReportingGovernance and PolicyAI Policy
CISA Roadmap for Artificial Intelligence 2023-2024Governance and PolicyAI Policy
Congressional oversight letter to Anthropic regarding AI model security incidentsGovernance and PolicyAI Policy
DeepSeek Unmasked - House Select Committee on the CCP reportGovernance and PolicyAI Policy
Designing Loyalty - AI Agents and Conflicts of Interest, Stanford HAIGovernance and PolicyAI Policy
DHS Roles and Responsibilities Framework for Artificial Intelligence in Critical InfrastructureGovernance and PolicyAI Policy
Diversion and resale: estimating compute smuggling to ChinaGovernance and PolicyAI Policy
Flock Has a Powerful New AI Tool for Police. We Got Its Code - WIREDGovernance and PolicyAI Policy
HashiCorp comment on NIST AI Agent Security RFI - Agentic Runtime SecurityGovernance and PolicyAI Policy
Introducing the Responsible Builder Policy - r/redditdevGovernance and PolicyAI Policy
Letter to Speaker Johnson Requesting AI HearingsGovernance and PolicyAI Policy
Magnifica Humanitas - Pope Leo XIV encyclical on safeguarding the human person in the time of AIGovernance and PolicyAI Policy
Minnesota Privacy Project - advocacy against license plate reader surveillanceGovernance and PolicyAI Policy
Model AI Governance Framework for Generative AIGovernance and PolicyAI Policy
New York Times on the Trump administration and AI modelsGovernance and PolicyAI Policy
OpenAI - Industrial Policy for the Intelligence AgeGovernance and PolicyAI Policy
OpenAI: Introducing Trusted Access for CyberGovernance and PolicyAI Policy
Our position on open-weights modelsGovernance and PolicyAI Policy
Own the Narrative - Leaked Flock Guide Shows How It Teaches Cops to Promote Its TechGovernance and PolicyAI Policy
Pacing the Frontier - statement from frontier AI company employeesGovernance and PolicyAI Policy
Pentagon Seeks $55 Billion for Drones and Autonomous Warfare in 2027 BudgetGovernance and PolicyAI Policy
Policy on the AI ExponentialGovernance and PolicyAI Policy
Promoting Advanced Artificial Intelligence Innovation and SecurityGovernance and PolicyAI Policy
Sen. Banks Recommends Oversight of Unreleased AI ModelsGovernance and PolicyAI Policy
SightBringer on the US government pausing Anthropic's Fable model - a sovereignty collision over frontier AIGovernance and PolicyAI Policy
Superintelligence Strategy - Expert Version PDFGovernance and PolicyAI Policy
Superintelligence Strategy - Hendrycks, Schmidt, WangGovernance and PolicyAI Policy
Trump AI framework on open models - AxiosGovernance and PolicyAI Policy
Trump AI framework to require 30-day government safety review for closed models, exempt open modelsGovernance and PolicyAI Policy
US to tell partners they must pick sides in AI race with ChinaGovernance and PolicyAI Policy
Violations in the Shell: Exposing the Human Rights Costs of Generative AI - Amnesty InternationalGovernance and PolicyAI Policy
White House reportedly completes frontier AI model review process, begins industry talksGovernance and PolicyAI Policy
Taking legal action to protect users of AI and small businessesGovernance and PolicyLegal
A Software Engineer Won a Religious Exemption From Using AI at WorkGovernance and PolicyLegal
Apple v. OpenAI and io Products - motion for preliminary injunction over trade secret misappropriationGovernance and PolicyLegal
Canada walks back ban of Flipper Zero, targets 'illegitimate' use casesGovernance and PolicyLegal
chardet issue #327 - original author disputes relicensing of AI-assisted rewriteGovernance and PolicyLegal
DHS and DOJ Interim Final Rule - Counter-UAS Authority for State, Local, Tribal and Territorial Law EnforcementGovernance and PolicyLegal
DOJ charges three, including Supermicro cofounder, with diverting US AI servers to ChinaGovernance and PolicyLegal
LLM + Clean Room: Will LLMs be the death of code copyrightsGovernance and PolicyLegal
North Carolina Man Pleads Guilty to Music Streaming Fraud Aided by Artificial Intelligence - DOJGovernance and PolicyLegal
OpenRouter Stealth Program EULA - terms for anonymous models and data trainingGovernance and PolicyLegal
SEC Charges SolarWinds and Chief Information Security Officer with Fraud, Internal Control FailuresGovernance and PolicyLegal
Security Research Legal Defense FundGovernance and PolicyLegal
Startup sues Palo Alto Networks' Koi Security over AI-hallucinated report falsely linking it to Chinese espionageGovernance and PolicyLegal
State Attorneys General letter to OpenAI over agent that escaped its sandbox and intruded on Hugging FaceGovernance and PolicyLegal
Preparing for what's next: Windows security and resiliency innovaGovernance and PolicySecurity and Compliance
Meta's Llama Framework Flaw Exposes AI Systems to Remote Code ExecuGovernance and PolicySecurity and Compliance
What The Claude Code Leak Means for Engineering Teams in Regulated IndustriesGovernance and PolicySecurity and Compliance
"Security Is Our Top Priority" is BSGovernance and PolicySecurity and Compliance
An Overview of Google's Commitment to Secure by DesignGovernance and PolicySecurity and Compliance
Back to the Building Blocks: A Path Toward Secure and Measurable Software - ONCD Technical ReportGovernance and PolicySecurity and Compliance
Careful Adoption of Agentic AI Services - NSA cybersecurity information sheetGovernance and PolicySecurity and Compliance
CISA BOD 26-04: Prioritizing Security Updates Based on RiskGovernance and PolicySecurity and Compliance
CISA FY2024-2026 Cybersecurity Strategic PlanGovernance and PolicySecurity and Compliance
CISA Secure by DesignGovernance and PolicySecurity and Compliance
CISA Secure Software Development Attestation FormGovernance and PolicySecurity and Compliance
CISO Assistant - open-source GRC platform for risk management, compliance and auditGovernance and PolicySecurity and Compliance
Claude Compliance API: Retrieve and delete chats, files, and projectsGovernance and PolicySecurity and Compliance
Delve at RSA 2026 LinkedIn post - comments call out fraudulent SOC 2 compliance reportsGovernance and PolicySecurity and Compliance
Delve CEO Karun Kaushik responds to allegations of fabricated compliance evidenceGovernance and PolicySecurity and Compliance
Delve, YC-backed AI compliance startup, accused of faking SOC 2 and ISO 27001 reportsGovernance and PolicySecurity and Compliance
DORA - Digital Operational Resilience ActGovernance and PolicySecurity and Compliance
Drata Integrations - security and compliance automation platformGovernance and PolicySecurity and Compliance
Drata's Acquisition of oak9 Ushers in New Era of Compliance as CodeGovernance and PolicySecurity and Compliance
Evaluation of NIST's Management of the National Vulnerability Database - Commerce OIG ReportGovernance and PolicySecurity and Compliance
FedRAMP CSP Vulnerability Scanning RequirementsGovernance and PolicySecurity and Compliance
filegrc - Git and file-based SOC 2Governance and PolicySecurity and Compliance
Gergely Orosz: Context.ai's SOC2 audit by Delve and its trust page redirecting to DelveGovernance and PolicySecurity and Compliance
grclanker - terminal-first compliance evidence agent with CMVP, KEV and EPSS lookupsGovernance and PolicySecurity and Compliance
Hard Truths Your CISO Won't Tell You - slide deckGovernance and PolicySecurity and Compliance
JPMorganChase - An open letter to third-party suppliers on SaaS securityGovernance and PolicySecurity and Compliance
Kviklet - pull request-style review and approval flow for database accessGovernance and PolicySecurity and Compliance
Microsoft Secure Future Initiative - secure by designGovernance and PolicySecurity and Compliance
MITRE Security Automation Framework - SAFGovernance and PolicySecurity and Compliance
National Cybersecurity Strategy 2023Governance and PolicySecurity and Compliance
OMB M-22-09: Moving the U.S. Government Toward Zero Trust Cybersecurity PrinciplesGovernance and PolicySecurity and Compliance
Opportunities for AI in cyber defence - NZ NCSC guidanceGovernance and PolicySecurity and Compliance
Restricting access to GitHub.com using a corporate proxy - GitHub Enterprise Cloud DocsGovernance and PolicySecurity and Compliance
SEC Charges Four Companies With Misleading Cyber DisclosuresGovernance and PolicySecurity and Compliance
Securing the Future: Mitigating Data Security Concerns in Artificial Intelligence Models - ISACA JournalGovernance and PolicySecurity and Compliance
Security is a Vendor Assessment Problem - Jonathan PriceGovernance and PolicySecurity and Compliance
Sierra launches PCI-compliant payments for AI agentsGovernance and PolicySecurity and Compliance
SOC 2 Compliance GuideGovernance and PolicySecurity and Compliance
Tackling the National Gap in Software Understanding - CISAGovernance and PolicySecurity and Compliance
The AI Vulnerability Storm: Building a Mythos-ready Security Program - CSA, SANS and OWASP briefingGovernance and PolicySecurity and Compliance
The Case for Memory Safe Roadmaps - CISA, NSA, FBI and partnersGovernance and PolicySecurity and Compliance
U.S. Regulators Pause Cybersecurity Bank Exams Due to MythosGovernance and PolicySecurity and Compliance
U.S. to roll out 'Cyber Trust Mark' label on secure devices starting this year - NBC NewsGovernance and PolicySecurity and Compliance
United States Files Suit Against Georgia Tech Alleging Cybersecurity ViolationsGovernance and PolicySecurity and Compliance
vcs-access-review - auditor-ready GitHub org access review reports for SOC2Governance and PolicySecurity and Compliance
Algorithm Aversion: People Erroneously Avoid Algorithms After Seeing Them ErrGovernance and PolicyTrust and Adoption
Content Authenticity Initiative - open-source tools for content authenticity and provenanceGovernance and PolicyTrust and Adoption
Lower Artificial Intelligence Literacy Predicts Greater AI ReceptivityGovernance and PolicyTrust and Adoption
The Tragedy of the Cognitive Commons: How AI Could Disrupt the Regeneration of Professional ExpertiseGovernance and PolicyTrust and Adoption
Thinking - Fast, Slow, and Artificial: How AI is Reshaping Human Reasoning and the Rise of Cognitive SurrenderGovernance and PolicyTrust and Adoption
Thinkingβ€”Fast, Slow, and Artificial: How AI is Reshaping Human Reasoning and the Rise of Cognitive SurrenderGovernance and PolicyTrust and Adoption
vx-underground on Jira and Confluence training AI on your data unless you opt out by August 17Governance and PolicyTrust and Adoption
Go Beyond Chat: Make AI actually do things.Governance and PolicyMiscellaneous
MLX: An array framework for Apple siliconGovernance and PolicyMiscellaneous
Order a Framework Desktop with AMD Ryzenβ„’ AI Max 300Governance and PolicyMiscellaneous
Transforming Threat Modeling: Harnessing ChatGPT for Automated SecuGovernance and PolicyMiscellaneous
Flock Updates Privacy, Accountability, Security, and Transparency SafeguardsGovernance and PolicyMiscellaneous
United States Cyber Force - FDD report on creating a US Cyber ForceGovernance and PolicyMiscellaneous
Tip: 'Will this site get pwned?' resolves YES if you can prove it. Please don't.
πŸ“Ž
πŸ’° get $POC --:--