{
 "_about": "The dated rows on hqlabz.com/security/, written by scripts/trackers/render.mjs at build. \"from\" says whether they came from the live CMS tracker or the seed in the repo; \"held\" lists why a live tracker was not drawn. Each row names its source, the day it was checked, and the source's own words it rests on (excerpt).",
 "page": "https://hqlabz.com/security/",
 "title": "Security in the AI era",
 "reviewed_on": "2026-10-22",
 "from": "seed",
 "entry": null,
 "revision": null,
 "release": 11,
 "held": [],
 "built_at": "2026-10-22T20:06:49.854Z",
 "rows": [
  {
   "group": "threat",
   "name": "LiteLLM package compromised",
   "who": "Reported by Wiz Research",
   "where": "Worldwide",
   "status": "watching",
   "dates": "2026-10-21: A malicious version, 1.107.0, uploaded to PyPI and Docker, then quarantined the same day",
   "what": "A widely used open source gateway for AI models shipped a version that stole browser, cloud and AI keys, downloaded about 49,000 times before it was pulled. Pin every AI library to a version you tested, and keep keys out of reach of your build tools.",
   "source": "https://www.wiz.io/blog/litellm-compromised-steals-credentials",
   "source_title": "Wiz: LiteLLM Compromised, Steals Credentials",
   "checked_on": "2026-10-22",
   "excerpt": "a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a credential stealer targeting browser, cloud and AI secrets"
  },
  {
   "group": "threat",
   "name": "LLMjacking through hijacked cloud billing",
   "who": "Reported by Wiz",
   "where": "Worldwide",
   "status": "watching",
   "dates": "2026-10-20: Wiz traces a campaign from one search ad click to a hijacked billing account",
   "what": "Attackers stole cloud logins through a search ad and ran AI models on the victim's bill, into hundreds of thousands of dollars. Spend limits, billing alerts and two-step sign-in on every cloud and AI account cut it off.",
   "source": "https://www.wiz.io/blog/from-phishing-to-llmjacking",
   "source_title": "Wiz: From Phishing to LLMjacking",
   "checked_on": "2026-10-22",
   "excerpt": "How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage"
  },
  {
   "group": "research",
   "name": "Check what an AI coding agent changed",
   "who": "Trail of Bits",
   "where": "Worldwide",
   "status": "published",
   "dates": "2026-10-21: Two open source plugins for checking an agent's patches",
   "what": "When an AI agent fixes a bug, it can change more than the bug. Review an agent's code changes like a new hire's, with tests that look for what else broke.",
   "source": "https://blog.trailofbits.com/",
   "source_title": "Trail of Bits: Your AI agent fixed the bug, but what else did it change?",
   "checked_on": "2026-10-22",
   "excerpt": "two plugins that let engineers delegate patch development"
  },
  {
   "group": "research",
   "name": "A virtual machine will not contain a capable agent",
   "who": "Trail of Bits",
   "where": "Worldwide",
   "status": "published",
   "dates": "2026-08-26: Research published",
   "what": "A sandbox alone is no longer a safe box for a capable AI agent. Limit what the agent can reach in the first place: its keys, its network and its tools.",
   "source": "https://blog.trailofbits.com/",
   "source_title": "Trail of Bits: VMs won't contain cyber-capable agents",
   "checked_on": "2026-10-22",
   "excerpt": "You can no longer assume a mere VM will contain a sufficiently advanced AI agent."
  },
  {
   "group": "standard",
   "name": "OWASP Top 10 for LLM Applications, 2026 edition",
   "who": "OWASP GenAI Security Project",
   "where": "Worldwide",
   "status": "published",
   "dates": "2026-09-01: 2026 edition announced, ranked against thousands of real incidents",
   "what": "The risk list security reviewers use for AI apps, reranked with real incident data. Excessive agency, an agent with more tools and permissions than its job needs, is now number three.",
   "source": "https://genai.owasp.org/2026/09/01/owasp-genai-security-project-unveils-2026-top-10-for-llm-applications-new-agent-control-standard-and-sponsors-as-community-tops-30000-members/",
   "source_title": "OWASP: 2026 Top 10 for LLM Applications announced",
   "checked_on": "2026-10-22",
   "excerpt": "the risk where expert judgment and the record agree most clearly is Excessive Agency, now number three"
  },
  {
   "group": "standard",
   "name": "OWASP Top 10 for Agentic Applications",
   "who": "OWASP GenAI Security Project",
   "where": "Worldwide",
   "status": "published",
   "dates": "2025-12-09: Released",
   "what": "The ten biggest risks of AI agents that plan and act on their own, with mitigations. Use it as the checklist for any agent that can take actions.",
   "source": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/",
   "source_title": "OWASP Top 10 for Agentic Applications for 2026",
   "checked_on": "2026-10-22",
   "excerpt": "is a globally peer-reviewed framework that identifies the most critical security risks facing autonomous and agentic AI systems"
  },
  {
   "group": "standard",
   "name": "OWASP Agent Control Standard",
   "who": "OWASP GenAI Security Project",
   "where": "Worldwide",
   "status": "proposed",
   "dates": "2026-09-01: Donated to the OWASP GenAI Security Project",
   "what": "An early standard for enforcing rules on AI agents while they run. Worth piloting against; too new for anyone to claim they meet it.",
   "source": "https://genai.owasp.org/2026/09/01/owasp-genai-security-project-unveils-2026-top-10-for-llm-applications-new-agent-control-standard-and-sponsors-as-community-tops-30000-members/",
   "source_title": "OWASP: Agent Control Standard announced",
   "checked_on": "2026-10-22",
   "excerpt": "The Agent Control Standard (ACS) has been donated to the OWASP GenAI Security Project"
  },
  {
   "group": "research",
   "name": "MITRE ATLAS adds AI agent techniques",
   "who": "MITRE",
   "where": "Worldwide",
   "status": "published",
   "dates": "2026-09-15: Release v2026.09",
   "what": "The catalog of real attacks on AI systems now covers more ways to attack AI agents, such as discovering what an agent can do at runtime. Useful for threat models and tests.",
   "source": "https://github.com/mitre-atlas/atlas-data/releases/tag/v2026.09",
   "source_title": "MITRE ATLAS data, release v2026.09",
   "checked_on": "2026-10-22",
   "excerpt": "This version of ATLAS data contains 1 matrix, 16 tactics, 120 techniques, 88 sub-techniques, 40 mitigations, and 73 case studies."
  },
  {
   "group": "guidance",
   "name": "NIST Cyber AI Profile (IR 8596)",
   "who": "NIST",
   "where": "United States",
   "status": "proposed",
   "dates": "2025-12-16: Preliminary draft published\n2026-01-30: Public comments closed",
   "what": "How to fold AI risks into the NIST Cybersecurity Framework most security programs already use. A public draft is the next step.",
   "source": "https://csrc.nist.gov/pubs/ir/8596/iprd",
   "source_title": "NIST IR 8596, Cyber AI Profile",
   "checked_on": "2026-10-22",
   "excerpt": "Date Published: December 16, 2025 Comments Due: January 30, 2026 (public comment period is CLOSED)"
  },
  {
   "group": "guidance",
   "name": "NIST control overlays for AI systems (COSIS)",
   "who": "NIST",
   "where": "United States",
   "status": "proposed",
   "dates": "2025-08-14: Concept paper\n2026-01-08: First outline, for predictive AI\n2026-10-20: Renamed for super intelligence systems",
   "what": "Security controls from NIST SP 800-53, tailored to AI systems and AI agents. Federal buyers will expect them once they are final.",
   "source": "https://csrc.nist.gov/projects/cosis",
   "source_title": "NIST SP 800-53 Control Overlays for Super Intelligence Systems",
   "checked_on": "2026-10-22",
   "excerpt": "SP 800-53 Control Overlays for Securing AI Systems (COSAiS) has been renamed to SP 800-53 Control Overlays for Super Intelligence Systems (COSIS)"
  },
  {
   "group": "standard",
   "name": "NIST adversarial machine learning taxonomy (AI 100-2 E2025)",
   "who": "NIST",
   "where": "United States",
   "status": "published",
   "dates": "2025-03-24: 2025 edition published",
   "what": "The standard names for attacks on AI, prompt injection and data poisoning among them, and the mitigations for each. It gives teams one vocabulary.",
   "source": "https://csrc.nist.gov/pubs/ai/100/2/e2025/final",
   "source_title": "NIST AI 100-2 E2025, Adversarial Machine Learning",
   "checked_on": "2026-10-22",
   "excerpt": "Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations"
  },
  {
   "group": "law",
   "name": "Executive Order 14409: AI innovation and security",
   "who": "The White House",
   "where": "United States",
   "status": "in_force",
   "dates": "2026-06-02: Signed\n2026-06-05: Published in the Federal Register",
   "what": "Federal prosecutors must prioritize cases against anyone who uses AI, AI agents included, to break into computers or data. Keep records of what your agents accessed and on whose authority.",
   "source": "https://www.federalregister.gov/documents/2026/06/05/2026-11415/promoting-advanced-artificial-intelligence-innovation-and-security",
   "source_title": "Federal Register: Promoting Advanced Artificial Intelligence Innovation and Security",
   "checked_on": "2026-10-22",
   "excerpt": "employing AI agents to unlawfully access data or information that is subsequently used for a criminal or unlawful purpose"
  },
  {
   "group": "guidance",
   "name": "DeepSeek products removed from federal systems",
   "who": "Department of Homeland Security",
   "where": "United States",
   "status": "in_force",
   "dates": "2026-10-20: Order published in the Federal Register",
   "what": "Federal civilian agencies must remove DeepSeek products and leave them out of purchases. Vendors to those agencies should know which AI models sit inside their products.",
   "source": "https://www.federalregister.gov/documents/2026/10/20/2026-21447/notice-of-order-regarding-exclusion-and-removal-of-deepseek-products-from-federal-civilian-executive",
   "source_title": "Federal Register: Exclusion and Removal of DeepSeek Products",
   "checked_on": "2026-10-22",
   "excerpt": "Exclusion and Removal of DeepSeek Products From Federal Civilian Executive Branch Information Technology Systems and Procurements"
  }
 ]
}