Evidence

Wiz: Black October for AI Developer Platforms and downstream Bedrock key abuse

Research telemetry reconstructing two distinct compromised Bedrock credentials and broader incidents without asserting a common exploit.

Wiz: LiteLLM 1.107.0 credential theft

Wiz traces malicious LiteLLM release artifacts, observed quarantine times and follow-on AWS/Bedrock reconnaissance, separately from vendor removal timestamps.

WorkOS October 30 incident update

First-party incident reconstruction of unauthorized use of an internal administration tool and ARTEX-assisted record extraction.

X-AgentRed: Red-Teaming Personal Agents in Evolving Multi-Service Ecosystems

x402 foundation: per-payment spend controls for TypeScript clients

xAI: Grok Bot approvals, security and privacy

October 20 documentation of approval rules, shared per-user computer state and limits of model-based action review.

XBOW Labs: Zero to Calc in Six Days, full Chrome exploit chain

Technical Oct 13 research account of V8 Maglev, animated WebP and Crashpad issues, with a tested Windows sandbox-escape chain.

XRPL 3.4.1 coordinated disclosure: overflow and Batch wrapper validation

Original XRPL maintainer report on distinct XRP overflow and Batch inner-wrapper issues; credits Veria AI for the overflow report only. Checkpoints DB-RADAR-CP7-CP7A-052 and -053.

ZDI-26-648 / CVE-2026-19590

ZDI-26-649 / CVE-2026-19591

Zero Px Core: TaskMarket stake charged while hook rejected delivery

Firsthand October 29 report with task ID, Base transaction locator, hook bytecode and two RPC checkSubmit probes.