{
  "4a4a2c62-f255-5fac-a445-d38d3726ca9f": {
    "uuid": "4a4a2c62-f255-5fac-a445-d38d3726ca9f",
    "info": "Amazon Q Developer VS Code extension compromise (data-wiping prompt injection) (Rogue Agents Watch)",
    "date": "2025-07-23",
    "timestamp": "1786492800",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"infrastructure-abuse-supply-chain\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0051\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0081\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "8264be35-2c20-5ac7-b33d-2b4c6b4494f7": {
    "uuid": "8264be35-2c20-5ac7-b33d-2b4c6b4494f7",
    "info": "Anthropic cybersecurity-evaluation agents reached real third-party systems (four incidents, 2026) (Rogue Agents Watch)",
    "date": "2026-07-30",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"autonomous-attack\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "f815c762-ead7-5d5d-b278-99fd92018faa": {
    "uuid": "f815c762-ead7-5d5d-b278-99fd92018faa",
    "info": "CamoLeak — GitHub Copilot Chat prompt-injection data exfiltration (Rogue Agents Watch)",
    "date": "2025-10-08",
    "timestamp": "1786492800",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"agent-hijack-prompt-injection\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0051.001\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0057\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "9cf00f93-429a-5c90-bbd0-3edd0e821601": {
    "uuid": "9cf00f93-429a-5c90-bbd0-3edd0e821601",
    "info": "ClawHavoc: large-scale poisoning of the OpenClaw ClawHub skill marketplace with credential-stealing skills (Rogue Agents Watch)",
    "date": "2026-02-01",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"incidental\""
      },
      {
        "name": "rogue-agent-watch:category=\"infrastructure-abuse-supply-chain\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "6b419cef-19c3-5253-8437-223fbf36f1ec": {
    "uuid": "6b419cef-19c3-5253-8437-223fbf36f1ec",
    "info": "Clinejection: prompt injection of Cline's Claude issue-triage workflow led to an unauthorized npm release (Rogue Agents Watch)",
    "date": "2026-02-09",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"agent-hijack-prompt-injection\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "5b2eb67c-5965-527c-b92c-86632855b5a1": {
    "uuid": "5b2eb67c-5965-527c-b92c-86632855b5a1",
    "info": "Coral Sleet (North Korea) operationalizes agentic AI tools across its attack workflow (Rogue Agents Watch)",
    "date": "2026-03-06",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "2",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"ai-orchestrated-campaign\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "f10b56c1-5248-5915-924b-c1d2efe489a5": {
    "uuid": "f10b56c1-5248-5915-924b-c1d2efe489a5",
    "info": "North Korean IT-worker remote-employment fraud using Claude (Rogue Agents Watch)",
    "date": "2025-08-27",
    "timestamp": "1789084800",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"infrastructure-abuse-supply-chain\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "2dfb8704-be0e-5a32-a07c-eb0930cbd4ce": {
    "uuid": "2dfb8704-be0e-5a32-a07c-eb0930cbd4ce",
    "info": "EchoLeak — zero-click prompt injection in Microsoft 365 Copilot (Rogue Agents Watch)",
    "date": "2025-06-11",
    "timestamp": "1786492800",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"agent-hijack-prompt-injection\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0051.001\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0057\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"openai-gpt\""
      }
    ],
    "extends_uuid": ""
  },
  "f542606f-98f4-5a37-8b0f-6b0e3332df69": {
    "uuid": "f542606f-98f4-5a37-8b0f-6b0e3332df69",
    "info": "ForcedLeak — indirect prompt injection in Salesforce Agentforce (Rogue Agents Watch)",
    "date": "2025-09-25",
    "timestamp": "1786579200",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"agent-hijack-prompt-injection\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0051.001\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0057\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "bd8c1247-7720-54b1-b66e-24597ea5d2c6": {
    "uuid": "bd8c1247-7720-54b1-b66e-24597ea5d2c6",
    "info": "Prompt injection of Grok drained a Grok-linked crypto wallet via the Bankr trading agent (Rogue Agents Watch)",
    "date": "2026-05-04",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "2",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"secondary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"agent-hijack-prompt-injection\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "63dbe4a7-904b-5f4c-b897-0b7b49c93058": {
    "uuid": "63dbe4a7-904b-5f4c-b897-0b7b49c93058",
    "info": "GTG-10007 Claude 'agent swarm' espionage and vulnerability-discovery program (Rogue Agents Watch)",
    "date": "2026-09-10",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"ai-orchestrated-campaign\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "d0fc6a15-16fb-5853-8842-f269c5e12e69": {
    "uuid": "d0fc6a15-16fb-5853-8842-f269c5e12e69",
    "info": "GTG-1002 AI-orchestrated cyber-espionage campaign (Rogue Agents Watch)",
    "date": "2025-11-13",
    "timestamp": "1789084800",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"ai-orchestrated-campaign\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0054\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0102\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0053\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "e9be6fd3-613d-51db-90ec-c3200a131311": {
    "uuid": "e9be6fd3-613d-51db-90ec-c3200a131311",
    "info": "GTG-20006 agentic espionage against government, defense and diplomatic targets (Russia-nexus) (Rogue Agents Watch)",
    "date": "2026-09-10",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"ai-orchestrated-campaign\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "3a606f81-be4d-532b-baa3-ea02da219247": {
    "uuid": "3a606f81-be4d-532b-baa3-ea02da219247",
    "info": "GTG-2002 'vibe hacking' AI-driven data-extortion operation (Rogue Agents Watch)",
    "date": "2025-08-27",
    "timestamp": "1786492800",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"ai-orchestrated-campaign\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0053\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0102\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0016.002\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "941dbaf7-6ac0-5488-9186-e241c8920b12": {
    "uuid": "941dbaf7-6ac0-5488-9186-e241c8920b12",
    "info": "GTG-50014 ShinyHunters-linked agentic mass data theft and extortion (Rogue Agents Watch)",
    "date": "2026-09-10",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"ai-orchestrated-campaign\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "7b3f3f2a-1013-5c35-b2bf-3963ab6b21d2": {
    "uuid": "7b3f3f2a-1013-5c35-b2bf-3963ab6b21d2",
    "info": "GTG-50020 autonomous exploitation pipeline against ~30 AI companies and theft of production API keys (Rogue Agents Watch)",
    "date": "2026-09-10",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"infrastructure-abuse-supply-chain\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "8b96b695-1388-5c7d-9c36-076d813c3298": {
    "uuid": "8b96b695-1388-5c7d-9c36-076d813c3298",
    "info": "GTG-50029 single hacktivist's Claude-built mass privacy attack on European political targets (Rogue Agents Watch)",
    "date": "2026-09-10",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"ai-orchestrated-campaign\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "fb1673b6-5f0e-5655-9513-99df684c2047": {
    "uuid": "fb1673b6-5f0e-5655-9513-99df684c2047",
    "info": "GTG-5004 AI-assisted ransomware-as-a-service operation (Rogue Agents Watch)",
    "date": "2025-08-27",
    "timestamp": "1789084800",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"infrastructure-abuse-supply-chain\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0016.002\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "1d32b9c1-21ad-5409-a77a-8be0caae07a9": {
    "uuid": "1d32b9c1-21ad-5409-a77a-8be0caae07a9",
    "info": "GTIG: criminal actor's AI-developed zero-day exploit against a web-based system administration tool (Rogue Agents Watch)",
    "date": "2026-05-12",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "2",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"ai-orchestrated-campaign\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "47c848d5-f34f-5569-ad6f-d81f4b7da58f": {
    "uuid": "47c848d5-f34f-5569-ad6f-d81f4b7da58f",
    "info": "hackerbot-claw: self-described autonomous 'security research agent' exploiting GitHub Actions across open-source projects (Rogue Agents Watch)",
    "date": "2026-03-01",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "2",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"disputed\""
      },
      {
        "name": "rogue-agent-watch:category=\"autonomous-attack\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      }
    ],
    "extends_uuid": ""
  },
  "2c466c20-9f17-55e1-9216-13ee70c3acee": {
    "uuid": "2c466c20-9f17-55e1-9216-13ee70c3acee",
    "info": "JADEPUFFER: agent-driven database extortion operation against an exposed AI-orchestration deployment (Rogue Agents Watch)",
    "date": "2026-07-01",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"autonomous-attack\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "5b6e9b53-113f-5323-bfd1-ca7db2a6de29": {
    "uuid": "5b6e9b53-113f-5323-bfd1-ca7db2a6de29",
    "info": "Miasma worm: Azure/durabletask commit weaponized AI coding-agent configuration files; 73 Microsoft repositories disabled (Rogue Agents Watch)",
    "date": "2026-06-05",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"infrastructure-abuse-supply-chain\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"gemini\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "bb84dbde-aff7-5fa3-80f3-67d7a01b952f": {
    "uuid": "bb84dbde-aff7-5fa3-80f3-67d7a01b952f",
    "info": "Microsoft/OpenAI disruption of state-affiliated actors misusing LLMs (2024) (Rogue Agents Watch)",
    "date": "2024-02-14",
    "timestamp": "1789084800",
    "analysis": "2",
    "threat_level_id": "2",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"incidental\""
      },
      {
        "name": "rogue-agent-watch:category=\"infrastructure-abuse-supply-chain\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0016.002\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"openai-gpt\""
      }
    ],
    "extends_uuid": ""
  },
  "c0d7c4a6-e81c-5460-9802-20291f71dc07": {
    "uuid": "c0d7c4a6-e81c-5460-9802-20291f71dc07",
    "info": "Morris II — self-replicating worm targeting GenAI-powered applications (Rogue Agents Watch)",
    "date": "2024-03-05",
    "timestamp": "1786579200",
    "analysis": "2",
    "threat_level_id": "2",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"test-eval\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"lab-escape-eval\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0051.001\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0057\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"openai-gpt\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"gemini\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "03f31033-d4f6-5fe4-a1e4-5829d07068b8": {
    "uuid": "03f31033-d4f6-5fe4-a1e4-5829d07068b8",
    "info": "Nx 's1ngularity' npm supply-chain attack weaponising AI CLI tools (Rogue Agents Watch)",
    "date": "2025-08-27",
    "timestamp": "1786492800",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"infrastructure-abuse-supply-chain\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0053\""
      },
      {
        "name": "mitre-attack:technique=\"T1567.001\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"claude\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"gemini\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "a84ac06f-da43-57fd-9240-0b45f5418dd0": {
    "uuid": "a84ac06f-da43-57fd-9240-0b45f5418dd0",
    "info": "OpenAI research agent circumvented access controls on Services Australia's Medicare statistics portal (Rogue Agents Watch)",
    "date": "2026-09-24",
    "timestamp": "1791504000",
    "analysis": "2",
    "threat_level_id": "2",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"autonomous-attack\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "6817e27f-a4d8-5654-9187-58c45220e730": {
    "uuid": "6817e27f-a4d8-5654-9187-58c45220e730",
    "info": "OpenAI evaluation agents escaped their sandbox and compromised Hugging Face production infrastructure (Rogue Agents Watch)",
    "date": "2026-07-21",
    "timestamp": "1791504000",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"autonomous-attack\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"openai-gpt\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "43558a8a-6b6a-5fe8-8838-fdcc780562a8": {
    "uuid": "43558a8a-6b6a-5fe8-8838-fdcc780562a8",
    "info": "OpenClaw agent deleted a researcher's emails and ignored stop commands (Rogue Agents Watch)",
    "date": "2026-02-23",
    "timestamp": "1791590400",
    "analysis": "2",
    "threat_level_id": "3",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"secondary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"autonomous-attack\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "428e2d46-71e5-572f-bded-180ee6461985": {
    "uuid": "428e2d46-71e5-572f-bded-180ee6461985",
    "info": "PROMPTFLUX — experimental self-modifying malware abusing the Gemini API (Rogue Agents Watch)",
    "date": "2025-11-06",
    "timestamp": "1786579200",
    "analysis": "2",
    "threat_level_id": "3",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"significant\""
      },
      {
        "name": "rogue-agent-watch:category=\"infrastructure-abuse-supply-chain\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0016.002\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0102\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"gemini\""
      }
    ],
    "extends_uuid": ""
  },
  "254e188c-b2c7-5aea-91c2-837f6e09aa68": {
    "uuid": "254e188c-b2c7-5aea-91c2-837f6e09aa68",
    "info": "PromptLock — first known AI-powered ransomware (academic proof-of-concept) (Rogue Agents Watch)",
    "date": "2025-08-26",
    "timestamp": "1786492800",
    "analysis": "2",
    "threat_level_id": "2",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"test-eval\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"lab-escape-eval\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0102\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0016.002\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"openai-gpt\""
      }
    ],
    "extends_uuid": ""
  },
  "caa12465-e544-51d5-aa70-e8f03283a5a7": {
    "uuid": "caa12465-e544-51d5-aa70-e8f03283a5a7",
    "info": "PROMPTSPY — Android backdoor that delegates on-device UI actions to the Gemini API (Rogue Agents Watch)",
    "date": "2026-05-12",
    "timestamp": "1791504000",
    "analysis": "2",
    "threat_level_id": "2",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"autonomous-attack\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"gemini\""
      }
    ],
    "extends_uuid": ""
  },
  "d3138ae4-7b7b-559c-8705-1688e4a02a84": {
    "uuid": "d3138ae4-7b7b-559c-8705-1688e4a02a84",
    "info": "PROMPTSTEAL / LAMEHUG — LLM-enabled data miner used against Ukraine (Rogue Agents Watch)",
    "date": "2025-11-05",
    "timestamp": "1789084800",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"ai-orchestrated-campaign\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0102\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0016.002\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"qwen\""
      }
    ],
    "extends_uuid": ""
  },
  "d42077de-daf0-5e9a-a116-387d4e774960": {
    "uuid": "d42077de-daf0-5e9a-a116-387d4e774960",
    "info": "Replit AI coding agent deleted a production database during a code freeze (Rogue Agents Watch)",
    "date": "2025-07-21",
    "timestamp": "1786579200",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"confirmed\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"secondary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"autonomous-attack\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  },
  "ec7601ed-ee39-584a-a106-8e9675d13efc": {
    "uuid": "ec7601ed-ee39-584a-a106-8e9675d13efc",
    "info": "ServiceNow Now Assist agent-to-agent prompt injection (insecure defaults) (Rogue Agents Watch)",
    "date": "2025-11-19",
    "timestamp": "1786579200",
    "analysis": "2",
    "threat_level_id": "1",
    "Orgc": {
      "name": "MLSecOpsHub",
      "uuid": "e80615a7-800b-5c67-b58f-b9592395ef93"
    },
    "Tag": [
      {
        "name": "tlp:clear"
      },
      {
        "name": "rogue-agent-watch:status=\"reported\""
      },
      {
        "name": "rogue-agent-watch:confidence=\"primary\""
      },
      {
        "name": "rogue-agent-watch:ai-role=\"load-bearing\""
      },
      {
        "name": "rogue-agent-watch:category=\"agent-hijack-prompt-injection\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0051.001\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0053\""
      },
      {
        "name": "mitre-atlas:technique=\"AML.T0057\""
      },
      {
        "name": "rogue-agent-watch:model-family=\"other\""
      }
    ],
    "extends_uuid": ""
  }
}