{ "total": 385, "firstDate": "2024-01-18", "latestDate": "2026-10-27", "ytd": { "year": 2026, "count": 325 }, "withCve": 135, "uniqueCves": 233, "avgSources": 2.86, "perQuarter": [ { "quarter": "2024-Q1", "count": 5 }, { "quarter": "2024-Q2", "count": 6 }, { "quarter": "2024-Q3", "count": 8 }, { "quarter": "2024-Q4", "count": 7 }, { "quarter": "2025-Q1", "count": 5 }, { "quarter": "2025-Q2", "count": 7 }, { "quarter": "2025-Q3", "count": 12 }, { "quarter": "2025-Q4", "count": 10 }, { "quarter": "2026-Q1", "count": 24 }, { "quarter": "2026-Q2", "count": 69 }, { "quarter": "2026-Q3", "count": 172 }, { "quarter": "2026-Q4", "count": 60 } ], "keywordBuckets": [ { "bucket": "MCP", "count": 51 }, { "bucket": "Claude Code / Anthropic", "count": 102 }, { "bucket": "OpenAI / ChatGPT / Codex", "count": 90 }, { "bucket": "Copilot / GitHub", "count": 32 }, { "bucket": "Cursor", "count": 25 }, { "bucket": "Gemini / Google", "count": 57 }, { "bucket": "LangChain / Langflow / LangGraph", "count": 23 }, { "bucket": "n8n / Flowise / low-code", "count": 17 }, { "bucket": "Ollama / vLLM / inference servers", "count": 12 }, { "bucket": "LiteLLM", "count": 16 }, { "bucket": "OpenClaw / ClawHub", "count": 15 }, { "bucket": "npm / PyPI supply chain", "count": 62 }, { "bucket": "prompt injection", "count": 80 }, { "bucket": "RCE", "count": 67 }, { "bucket": "credential / secret theft", "count": 198 }, { "bucket": "offensive use by attackers", "count": 45 }, { "bucket": "DPRK", "count": 9 }, { "bucket": "crypto / DeFi", "count": 56 }, { "bucket": "misalignment / rogue agent", "count": 20 }, { "bucket": "not a vulnerability / disputed", "count": 22 } ], "mcpShare": [ { "quarter": "2024-Q1", "mcp": 0, "total": 5, "share": 0 }, { "quarter": "2024-Q2", "mcp": 0, "total": 6, "share": 0 }, { "quarter": "2024-Q3", "mcp": 0, "total": 8, "share": 0 }, { "quarter": "2024-Q4", "mcp": 0, "total": 7, "share": 0 }, { "quarter": "2025-Q1", "mcp": 0, "total": 5, "share": 0 }, { "quarter": "2025-Q2", "mcp": 2, "total": 7, "share": 28.6 }, { "quarter": "2025-Q3", "mcp": 1, "total": 12, "share": 8.3 }, { "quarter": "2025-Q4", "mcp": 0, "total": 10, "share": 0 }, { "quarter": "2026-Q1", "mcp": 2, "total": 24, "share": 8.3 }, { "quarter": "2026-Q2", "mcp": 7, "total": 69, "share": 10.1 }, { "quarter": "2026-Q3", "mcp": 13, "total": 172, "share": 7.6 }, { "quarter": "2026-Q4", "mcp": 16, "total": 60, "share": 26.7 } ], "topSources": [ { "outlet": "The Hacker News", "count": 138 }, { "outlet": "The Register", "count": 51 }, { "outlet": "BleepingComputer", "count": 44 }, { "outlet": "SecurityWeek", "count": 35 }, { "outlet": "Help Net Security", "count": 30 }, { "outlet": "Cybersecurity News", "count": 28 }, { "outlet": "Dark Reading", "count": 24 }, { "outlet": "GBHackers", "count": 23 }, { "outlet": "Wiz", "count": 18 }, { "outlet": "Infosecurity Magazine", "count": 17 }, { "outlet": "CSO Online", "count": 16 }, { "outlet": "NVD", "count": 13 }, { "outlet": "TechCrunch", "count": 12 }, { "outlet": "SC Media", "count": 11 }, { "outlet": "CISA", "count": 9 } ], "tagging": { "tagged": 385, "inModel": 270, "outsideModel": [ { "class": "capability", "count": 20 }, { "class": "offensive_use", "count": 33 }, { "class": "resource_theft", "count": 5 }, { "class": "context", "count": 31 }, { "class": "model_safety", "count": 3 }, { "class": "adjacent", "count": 21 }, { "class": "reliability", "count": 2 } ], "layers": [ { "layer": 1, "primary": 29, "secondary": 86, "any": 115 }, { "layer": 2, "primary": 57, "secondary": 29, "any": 86 }, { "layer": 3, "primary": 6, "secondary": 7, "any": 13 }, { "layer": 4, "primary": 9, "secondary": 25, "any": 34 }, { "layer": 5, "primary": 37, "secondary": 58, "any": 95 }, { "layer": 6, "primary": 103, "secondary": 32, "any": 135 }, { "layer": 7, "primary": 19, "secondary": 21, "any": 40 }, { "layer": 8, "primary": 10, "secondary": 71, "any": 81 } ], "primaryByQuarter": [ { "quarter": "2024-Q1", "L1": 0, "L2": 1, "L3": 0, "L4": 0, "L5": 0, "L6": 1, "L7": 0, "L8": 0 }, { "quarter": "2024-Q2", "L1": 2, "L2": 0, "L3": 0, "L4": 0, "L5": 0, "L6": 1, "L7": 0, "L8": 0 }, { "quarter": "2024-Q3", "L1": 0, "L2": 4, "L3": 0, "L4": 0, "L5": 0, "L6": 2, "L7": 0, "L8": 1 }, { "quarter": "2024-Q4", "L1": 0, "L2": 3, "L3": 0, "L4": 0, "L5": 0, "L6": 2, "L7": 0, "L8": 0 }, { "quarter": "2025-Q1", "L1": 1, "L2": 1, "L3": 0, "L4": 0, "L5": 1, "L6": 0, "L7": 0, "L8": 0 }, { "quarter": "2025-Q2", "L1": 0, "L2": 3, "L3": 1, "L4": 0, "L5": 0, "L6": 3, "L7": 0, "L8": 0 }, { "quarter": "2025-Q3", "L1": 2, "L2": 4, "L3": 0, "L4": 1, "L5": 2, "L6": 1, "L7": 2, "L8": 0 }, { "quarter": "2025-Q4", "L1": 1, "L2": 4, "L3": 0, "L4": 0, "L5": 3, "L6": 1, "L7": 0, "L8": 0 }, { "quarter": "2026-Q1", "L1": 4, "L2": 1, "L3": 0, "L4": 0, "L5": 4, "L6": 6, "L7": 1, "L8": 0 }, { "quarter": "2026-Q2", "L1": 6, "L2": 6, "L3": 0, "L4": 4, "L5": 7, "L6": 21, "L7": 4, "L8": 2 }, { "quarter": "2026-Q3", "L1": 8, "L2": 25, "L3": 4, "L4": 3, "L5": 11, "L6": 48, "L7": 8, "L8": 6 }, { "quarter": "2026-Q4", "L1": 5, "L2": 5, "L3": 1, "L4": 1, "L5": 9, "L6": 17, "L7": 4, "L8": 1 } ], "l6ByActor": [ { "value": "vendor_eval", "count": 26 }, { "value": "operator", "count": 5 }, { "value": "attacker", "count": 70 }, { "value": "unknown", "count": 2 } ], "fixable": [ { "value": "true", "count": 175 }, { "value": "false", "count": 92 }, { "value": "null", "count": 3 } ], "vendorResponse": [ { "value": "patched", "count": 158 }, { "value": "disputed", "count": 3 }, { "value": "not_a_vulnerability", "count": 10 }, { "value": "no_response", "count": 3 }, { "value": "mixed", "count": 5 }, { "value": "unknown", "count": 91 } ], "inTheWild": { "inModel": { "yes": 102, "no": 168 }, "outside": { "yes": 69, "no": 46 }, "all": { "yes": 171, "no": 214 } }, "topLayer": { "layer": 6, "count": 103, "share": 38.1 } } }