AI SECURITY RESEARCH · PRACTITIONER GUIDANCE
Published research, incident analysis, regulatory context and practitioner guidance. Each article should be read with its stated sources, scope and limits.
Open to read · Publication counts below reflect the published records currently available on this site.
Check the publication ID and date, the source basis, the claim being made and its limits. A published article does not by itself establish an assessment, certification or finding about a particular system. Corrections should remain visible and point to the current authoritative version.
PUBLICATIONS
The catalog includes the published WordPress records available on this site. Search matches titles, article text, publication IDs, tags and recorded evidence-basis fields. Category and year narrow the results; sort changes their order. A match is a retrieval result, not an endorsement or evidence-tier judgment.
ODA3-2026-07-INS-077
A source-bounded incident analysis of OpenAI's disclosed model-evaluation escape, the Hugging Face production impact, and the assurance-boundary lessons for AI evaluation environments.
Read publication →ODA3-2026-07-INS-071
A public-disclosure analysis of the reported Hugging Face intrusion, separating confirmed pipeline compromise from unresolved claims about autonomous attack behavior.
Read publication →ODA3-2026-05-INS-012
Palo Alto’s 7× vulnerability discovery report + Google TAG’s APT45 findings prove AI is compressing exploit timelines. The question isn’t “how many bugs?”.
Read publication →ODA3-2026-05-INS-017
Every AI Agent Running in Your Environment Right Now Is Either Identity-Bound — or a Liability Waiting to Trigger. 340% year-over-year increase in.
Read publication →ODA3-2026-04-INS-047
Rogue AI agents—unauthorized autonomous actors operating inside enterprise environments—represent a critical blind spot in most security programs. Unlike.
Read publication →ODA3-2026-04-INS-054
On April 19, 2026, Vercel disclosed a breach traced to Context.ai, a third-party AI tool installed on an employee’s device. The attacker used OAuth token.
Read publication →ODA3-2026-04-INS-052
OX Security researchers have identified a fundamental design aw in Anthropic’s Model Context Protocol (MCP)—the industry-standard AI communication.
Read publication →ODA3-2026-04-INS-050
The Mercor supply chain incident (April 8-12, 2026) demonstrated a fully realized AI supply chain attack: attackers identified and exploited a.
Read publication →
