Evidence

ToFu: Exploiting and Fuzzing the LLM-Orchestrator-Tool Trust Boundary

Trellix - OpenClaw supply-chain crisis / ClawHavoc

Trevor Blackwell / exfil source repository

Primary project repository for the GET-based transfer demonstration. The existing corpus preserves its mechanism and separate reproduction locators. Repository-page/raw retrieval was not available in this pass; no production model-weight theft is established by the retained evidence.

TrojanStego: Your Language Model Can Secretly Be A Steganographic Privacy Leaking Agent

tronify.rent threat-intelligence record

Living threat-intelligence record for tronify.rent. It records first detection on February 26, 2026, later abuse-report activity and continuing risk signals, establishing that public warning evidence about the domain existed before the alleged September losses.

PhishDestroy

Understanding and Mitigating Cross-Session Attacks via Persistent Artifacts in Agent Skill Composition

US law-enforcement intelligence documents describe two arrests involving fabricated AI evidence given to police — original research or disclosure

Reported evidence for A reported review of law-enforcement records identifies two investigations involving manufactured images or videos submitted as evidence. Research intake: DB-RADAR-CP7-CP7A-077.

What is Anthropic's policy for handling governmental requests for user information?

Anthropic says it does not disclose customer or end-user information in response to government requests except through valid legal process, such as a subpoena or warrant, unless it believes an emergency may result in imminent physical harm or death and immediate disclosure could avert it. Anthropic also says it evaluates requests for legal validity, may reject requests that are broad or vague, and generally gives users notice unless prohibited or a rare exception applies. For API or enterprise customer data, Anthropic says it will generally ask the requester to contact the customer first.

What You Sign Is Not What You Run: GGUF quantized model provenance audit

Liu and Tsai quantify missing environment provenance among the 198 most-downloaded in-scope GGUF repositories and demonstrate partial bit-exact reconstruction.

WIRED - Zoom screen-sharing takeover bug

X-AgentRed: Red-Teaming Personal Agents in Evolving Multi-Service Ecosystems

XBOW Labs: Zero to Calc in Six Days, full Chrome exploit chain

Technical Oct 13 research account of V8 Maglev, animated WebP and Crashpad issues, with a tested Windows sandbox-escape chain.

XRPL 3.4.1 coordinated disclosure: overflow and Batch wrapper validation

Original XRPL maintainer report on distinct XRP overflow and Batch inner-wrapper issues; credits Veria AI for the overflow report only. Checkpoints DB-RADAR-CP7-CP7A-052 and -053.

ZDI-26-648 / CVE-2026-19590

ZDI-26-649 / CVE-2026-19591