AI SECURITY RESEARCH · PRACTITIONER GUIDANCE
Published research, incident analysis, regulatory context and practitioner guidance. Each article should be read with its stated sources, scope and limits.
Open to read · Publication counts below reflect the published records currently available on this site.
Check the publication ID and date, the source basis, the claim being made and its limits. A published article does not by itself establish an assessment, certification or finding about a particular system. Corrections should remain visible and point to the current authoritative version.
PUBLICATIONS
The catalog includes the published WordPress records available on this site. Search matches titles, article text, publication IDs, tags and recorded evidence-basis fields. Category and year narrow the results; sort changes their order. A match is a retrieval result, not an endorsement or evidence-tier judgment.
ODA3-2026-06-DP-011
ODA3 defensive publication establishing prior art for Attack-Vector-Specific Context Modifier Taxonomy with Per-Factor Capping for AI Incident Severity.
Read publication →ODA3-2026-06-DP-012
ODA3 defensive publication establishing prior art for Inference-Layer Decision Trace Logging and Coordinated Multi-Component Rollback for AI Incident.
Read publication →ODA3-2026-06-INS-011
A landmark research publication from ODA3 Institute maps the enforcement reality across GDPR, HIPAA, FINRA, and SEC for AI-enabled organisations —.
Read publication →ODA3-2026-05-INS-012
Palo Alto’s 7× vulnerability discovery report + Google TAG’s APT45 findings prove AI is compressing exploit timelines. The question isn’t “how many bugs?”.
Read publication →ODA3-2026-05-INS-013
In 2024, an enterprise document processing pipeline ex ltrated a credential le to an attacker-controlled email address. The AI system that did it was not.
Read publication →ODA3-2026-05-INS-014
Recent reports of mass-exposed AI service endpoints prove that asset inventory gaps aren’t just operational oversights — they’re board-level governance.
Read publication →ODA3-2026-05-INS-015
Your AI Tools Have the Keys to Every Tenant in Your Cloud. Most Security Teams Don’t Know It Yet. New ODA3 research — validated against 47 verified.
Read publication →ODA3-2026-05-INS-016
The PAN-OS zero-day, WatchGuard Firebox exploit, and active SharePoint targeting prove a simple truth: you cannot govern AI systems on a compromised.
Read publication →ODA3-2026-05-INS-017
Every AI Agent Running in Your Environment Right Now Is Either Identity-Bound — or a Liability Waiting to Trigger. 340% year-over-year increase in.
Read publication →ODA3-2026-05-INS-018
The DPRK’s AI-generated npm malware and self-propagating npm worm just proved that AI is now a weapon in the software supply chain — not just a.
Read publication →ODA3-2026-05-INS-019
New research reveals that 68–82% of agentic deployments lack the most basic execution controls — and the financial and regulatory consequences are.
Read publication →ODA3-2026-05-INS-020
The Gemini CLI RCE, Cursor code execution exposure, and VS Code Copilot injection risks just proved your AI coding assistant is an attack surface — not.
Read publication →
