AI security research / organizations

Organizations

Organizations appearing in explicit research relationships.

33 published records · Page 1 of 2

Published organizations

organization

Amazon Web Services

Cloud and managed AI infrastructure provider publishing advisories on the AWS MCP Server run_script validation failure and the SageMaker SDK predictable default-bucket owner-confusion weakness.

2 explicit connections

organization

Anthropic

AI company that disclosed cyber-evaluation incidents and multiple real-world misuse investigations in 2026.

51 explicit connections

organization

Apiiro

Application security company whose October 2026 investigation enumerated the FakeGit GitHub malware fleet, the repository re-pointing mechanism and malicious ZIP files co-located with AI skill folders.

1 explicit connection

organization

Check Point Research

Security research group that disclosed the ChatGPT shared-service cross-account channel in September 2026.

8 explicit connections

organization

Cloudflare

Internet infrastructure, security and developer-platform operator publishing certificate-trust incident responses and agent-facing commerce tools.

3 explicit connections

organization

DeepSeek

AI model provider that Anthropic says silently relayed selected user requests to Claude during a distillation campaign.

6 explicit connections

organization

Energize Lab

Developer and marketer of Eiliko AI-enabled companion robots; its cloud-backed product became the subject of October 2026 privacy and remote-control vulnerability reporting.

2 explicit connections

organization

Fireworks AI

AI inference provider that reported unauthorized access to some customers’ evaluation-job secrets.

2 explicit connections

organization

Google

Technology and cloud platform company developing Gemini and dedicated agent compute, policy and identity infrastructure.

4 explicit connections

organization

GTG-50021

Anthropic tracking label for a Russian- and Ukrainian-speaking fraudulent AI reseller group.

1 explicit connection

organization

Hacktron

Security research organization whose July 2026 work chained image-processing exploitation, an OpenAI community-forum compromise, SSO account takeover and connected development authority. Hacktron describes itself as building an AI-security platform; for Digging Beagle the relevant role is the research team behind the disclosed OpenAI/Discourse chain.

1 explicit connection

organization

Hugging Face

AI platform whose production infrastructure was reached during the July 2026 OpenAI evaluation incident.

5 explicit connections

organization

Irregular

Frontier AI security lab that operates cyber-capability evaluation infrastructure for major AI labs. Its 2026 incident review documented unintended internet access and naming collisions between fictional evaluation targets and real domains, then described containment and monitoring changes.

1 explicit connection

organization

JFrog

Security vendor connecting developer-device AI-asset inventories with skill scanning and policy enforcement.

4 explicit connections

organization

Mage AI

Open-source data pipeline and development platform with repository management, session authentication and terminal functions.

4 explicit connections

organization

METR

Independent model-evaluation and threat-research organization.

2 explicit connections

organization

Microsoft

Vendor and security-research organization that disclosed Semantic Kernel and AutoGen Studio agent-framework vulnerabilities.

8 explicit connections

organization

Nightingale Collective

Independent research group involved in the OpenAI public-wiki and RubyGems investigations.

2 explicit connections

organization

NorForge

NorForge is an AI-agent containment and security-research company. Its October 2026 Cairn investigation examined externally reachable agent-operation dashboards and separated suspected criminal operations from legitimate security testing. Panel observations, reported victim counts and model usage must not be treated as

2 explicit connections

organization

Northflank

Cloud deployment platform that disclosed a credential exposure incident and subsequent reports of unauthorized use of customer AI provider keys.

2 explicit connections

organization

Nous Research

Developer and maintainer organization of the Hermes Agent software.

5 explicit connections

organization

NVIDIA

Compute hardware and software company developing DPU-isolated runtime monitoring for AI agents.

5 explicit connections

organization

OpenAI

AI research and product company that disclosed the July 2026 evaluation incident.

45 explicit connections

organization

Perplexity

AI search, decisions and agent tooling provider whose SPACE sandbox implementation and Decisions API have separately documented security and reliability boundaries.

2 explicit connections

organization

Philadelphia Police Department

Law-enforcement department whose public tip system received a fabricated Claude evaluation submission in July 2026.

2 explicit connections

organization

Redwood Research

AI control and alignment research organization.

3 explicit connections

organization

Ruby Central

Organization responsible for RubyGems stewardship and the September 11 technical update on the May spam-publishing campaign. Ruby Central provides first-party registry-impact evidence while remaining more cautious than external reports about AI-agent attribution.

0 explicit connections

organization

ServiceNow

Enterprise workflow vendor developing persistent agents and agent authorization controls.

3 explicit connections

organization

ShinyHunters-affiliate clusters

Anthropic tracking label for financially motivated clusters it assessed as suspected ShinyHunters affiliates.

1 explicit connection

organization

StepSecurity

Independent software supply-chain investigator of the Tensorlake signed-malware release.

3 explicit connections