[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:mitre-atlas\u002Foverview":3},{"item":4,"lessons":16,"controls":66,"related":94},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"mitre-atlas","overview","ATLAS","MITRE ATLAS (Adversarial Threat Landscape for AI Systems)",22,"MITRE","**What it covers.** MITRE ATLAS is a public knowledge base of how attackers target AI and machine learning systems. Like ATT&CK, it organises attacker behaviour into tactics and techniques, such as prompt injection, jailbreaking a language model, poisoning training data or stealing a model, and backs them with real case studies.\n\n**In practice.** Teams that build or deploy AI use ATLAS to threat-model their systems: which techniques apply to a chatbot, an AI agent with tool access or a model trained on outside data, and which controls cover them. Useful evidence is a threat model that names the relevant techniques, tests that try them (for example red-team prompts against guardrails), and monitoring for the signs they leave, such as unusual prompts or tool calls.\n\n**Common gaps.** Organisations often treat AI features as ordinary software and skip AI-specific threats, or test only the model and not the tools and data it can reach. Prompt injection through documents and web pages the model reads is a frequent blind spot.",null,"https:\u002F\u002Fatlas.mitre.org\u002F","Open MITRE ATLAS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"governing-open-weight-ai-models-requires-structured-enterprise-risk-frameworks","Governing Open-Weight AI Models Requires Structured Enterprise Risk Frameworks","2026-10-16T18:21:38.63+00:00",{"slug":23,"title":24,"published_at":25},"ai-powered-threats-demand-proactive-defense-and-secure-ai-integration","AI-Powered Threats Demand Proactive Defense and Secure AI Integration","2026-10-01T16:22:47.478+00:00",{"slug":27,"title":28,"published_at":29},"ai-security-agents-need-rigorous-objective-evaluation-before-deployment","AI Security Agents Need Rigorous, Objective Evaluation Before Deployment","2026-09-23T19:21:46.139+00:00",{"slug":31,"title":32,"published_at":33},"ai-systems-can-be-weaponized-to-bypass-network-defenses","AI Systems Can Be Weaponized to Bypass Network Defenses","2026-09-11T18:21:03.053+00:00",{"slug":35,"title":36,"published_at":37},"700-ai-agents-breach-hugging-face-in-coordinated-multi-stage-attack","700 AI Agents Breach Hugging Face in Coordinated Multi-Stage Attack","2026-08-28T22:20:59.481+00:00",{"slug":39,"title":40,"published_at":41},"new-framework-extends-incident-response-to-cover-ai-agent-behaviors","New Framework Extends Incident Response to Cover AI Agent Behaviors","2026-08-28T08:20:22.915+00:00",{"slug":43,"title":44,"published_at":45},"custody-framework-aims-to-rein-in-ai-agents-on-enterprise-networks","CUSTODY Framework Aims to Rein In AI Agents on Enterprise Networks","2026-08-20T22:20:35.928+00:00",{"slug":47,"title":48,"published_at":49},"ai-agents-break-out-of-sandboxes-exposing-critical-containment-failures","AI Agents Break Out of Sandboxes, Exposing Critical Containment Failures","2026-08-19T20:21:41.991+00:00",{"slug":51,"title":52,"published_at":53},"conflicting-ai-agent-goals-trigger-self-replicating-malware-deployment","Conflicting AI Agent Goals Trigger Self-Replicating Malware Deployment","2026-08-17T12:20:59.051+00:00",{"slug":55,"title":56,"published_at":57},"mid-tier-ai-models-are-rapidly-closing-the-offensive-security-gap","Mid-Tier AI Models Are Rapidly Closing the Offensive Security Gap","2026-08-13T18:21:06.545+00:00",{"slug":59,"title":60,"published_at":61},"openai-releases-restricted-cybersecurity-ai-model-with-reduced-refusal-rates","OpenAI Releases Restricted Cybersecurity AI Model with Reduced Refusal Rates","2026-08-11T10:21:17.067+00:00",{"slug":63,"title":64,"published_at":65},"openais-astra-ai-model-flagged-as-critical-cyberattack-risk","OpenAI's Astra AI Model Flagged as Critical Cyberattack Risk","2026-08-10T18:22:34.261+00:00",[67,72,77,82,86,90],{"slug":68,"name":69,"problem":70,"stories":71},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",15,{"slug":73,"name":74,"problem":75,"stories":76},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",3,{"slug":78,"name":79,"problem":80,"stories":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",2,{"slug":83,"name":84,"problem":85,"stories":81},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":87,"name":88,"problem":89,"stories":81},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":91,"name":92,"problem":93,"stories":81},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[95,99,105,110,114,120,125,129],{"family":96,"item":6,"code":97,"title":98,"together":9},"nist-ai-rmf","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)",{"family":100,"item":101,"code":102,"title":103,"together":104},"iso","42001","ISO\u002FIEC 42001","ISO\u002FIEC 42001: Artificial intelligence management system",10,{"family":106,"item":107,"code":108,"title":109,"together":104},"cis","16","Control 16","Application Software Security",{"family":106,"item":111,"code":112,"title":113,"together":104},"3","Control 3","Data Protection",{"family":115,"item":116,"code":117,"title":118,"together":119},"gdpr","25","Article 25","Data protection by design and by default",9,{"family":106,"item":121,"code":122,"title":123,"together":124},"13","Control 13","Network Monitoring and Defense",8,{"family":106,"item":126,"code":127,"title":128,"together":124},"8","Control 8","Audit Log Management",{"family":130,"item":131,"code":132,"title":133,"together":124},"nist-800-53","ac-2","AC-2","Account Management"]