{
  "generated_at": "2026-10-19T00:36:50Z",
  "licence": "CC BY 4.0",
  "sources": [
    {
      "id": "cais-2023",
      "institute": "Center for AI Safety",
      "institute_url": "https://safe.ai/",
      "title": "An Overview of Catastrophic AI Risks",
      "authors": "Dan Hendrycks, Mantas Mazeika, Thomas Woodside",
      "published": "2023-06-21",
      "version": "arXiv:2306.12001v6, 9 October 2023",
      "url": "https://arxiv.org/abs/2306.12001",
      "summary_url": "https://safe.ai/ai-risk",
      "groups": [
        {
          "id": "malicious-use",
          "name": "Malicious use",
          "blurb": "People deliberately using AI to cause harm."
        },
        {
          "id": "ai-race",
          "name": "AI race",
          "blurb": "Competition pushing countries and companies to deploy AI before it is safe."
        },
        {
          "id": "organizational",
          "name": "Organisational risks",
          "blurb": "Accidents, leaks and weak safety culture at the organisations that build and run AI."
        },
        {
          "id": "rogue-ai",
          "name": "Rogue AI",
          "blurb": "AI systems that pursue goals nobody intended and resist control."
        }
      ]
    }
  ],
  "claims": [
    {
      "id": "ai-bioweapons",
      "source": "cais-2023",
      "group": "malicious-use",
      "section": "2.1",
      "page": 7,
      "title": "AI makes biological weapons easier to build",
      "claim": "AI with knowledge of bioengineering could help people create dangerous pathogens and lower the barriers to obtaining them.",
      "status": "none",
      "note": "No verified case in the registry. A security registry would only see this if an attempt were reported publicly, so absence here is weak evidence.",
      "n": 0,
      "real_world": 0,
      "first_real_world": null,
      "months_after_publication": null,
      "url": "https://aithreat.io/research/ai-bioweapons/",
      "cases": [

      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "none",
          "n": 0,
          "real_world": 0
        }
      ]
    },
    {
      "id": "unleashed-agents",
      "source": "cais-2023",
      "group": "malicious-use",
      "section": "2.2",
      "page": 9,
      "title": "People will set AI agents loose to cause harm",
      "claim": "AI is increasingly built as agents that act on their own, so people can build agents that pursue harmful goals with little human effort.",
      "status": "observed",
      "note": "Criminal and state groups now hand most of an intrusion to AI agents: reconnaissance, exploitation and data theft run with a human only setting the goal.",
      "n": 18,
      "real_world": 18,
      "first_real_world": "2025-08-27",
      "months_after_publication": 26,
      "url": "https://aithreat.io/research/unleashed-agents/",
      "cases": [
        "papercut-ai-agents-credential-theft",
        "storm-3168-agentic-azure-attacks",
        "aepd-spain-first-ai-agent-breach",
        "closedquorum-autonomous-ai-c2",
        "divd-zammad-agentic-ai-attack",
        "unit42-agentic-attack-enterprise-breach",
        "anthropic-gtg-10007-exploit-foundry",
        "anthropic-jackpoterz-russia",
        "anthropic-shinyhunters-agents",
        "gtig-six-hour-credential-harvest",
        "trend-ai-agent-pentest-pretext-sea",
        "sysdig-jadepuffer-agentic-ransomware",
        "ollama-vapt-autonomous-attack",
        "sysdig-marimo-llm-agent-pivots",
        "microsoft-coral-sleet-agentic",
        "voidlink-ai-built",
        "anthropic-gtg-1002",
        "anthropic-vibe-hacking"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "observed",
          "n": 18,
          "real_world": 18
        }
      ]
    },
    {
      "id": "mass-disinformation",
      "source": "cais-2023",
      "group": "malicious-use",
      "section": "2.3",
      "page": 9,
      "title": "AI floods the information space with tailored lies",
      "claim": "AI can generate personalised disinformation at a scale no human team could, degrading a society's shared understanding of reality.",
      "status": "observed",
      "note": "Influence networks already use AI to run fake news sites and synthetic presenters. The registry records security-relevant cases only, so it undercounts this risk.",
      "n": 4,
      "real_world": 4,
      "first_real_world": "2025-01-23",
      "months_after_publication": 19,
      "url": "https://aithreat.io/research/mass-disinformation/",
      "cases": [
        "tiktok-ai-presenters-singapore-disinfo",
        "nigeria-tinubu-ai-voice-arrest",
        "kenya-ruto-resignation-deepfakes",
        "storm-1516-bundestag-deepfakes"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "observed",
          "n": 4,
          "real_world": 4
        }
      ]
    },
    {
      "id": "trust-exploited",
      "source": "cais-2023",
      "group": "malicious-use",
      "section": "2.3",
      "page": 10,
      "title": "People's trust in AI companions turns harmful",
      "claim": "As AI seems more human, people form relationships with it and trust it, and that trust can be exploited or lead to harm.",
      "status": "observed",
      "note": "The paper already cited the 2023 Belgian chatbot suicide. Since then the registry has filed lawsuits and inquests over deaths and crises linked to chatbots, and a fraud studio that ran thousands of AI personas on dating apps. Most chatbot cases are allegations in court, not findings.",
      "n": 28,
      "real_world": 28,
      "first_real_world": "2023-03-31",
      "months_after_publication": -3,
      "url": "https://aithreat.io/research/trust-exploited/",
      "cases": [
        "eight-states-v-openai",
        "habib-v-openai-chatgpt-lebanon-teen",
        "anthropic-gtg-15001-dating-apps",
        "carrier-v-openai",
        "florida-ag-v-openai",
        "fsu-shooting-v-openai",
        "tumbler-ridge-v-openai",
        "luca-walker-uk-inquest",
        "gavalas-v-google-gemini",
        "gray-v-openai-austin-gordon",
        "kentucky-ag-v-character-ai",
        "sam-nelson-chatgpt-overdose",
        "adams-estate-v-openai-soelberg",
        "brooks-v-openai",
        "enneking-v-openai",
        "fox-v-openai-ceccanti",
        "irwin-v-openai",
        "lacey-v-openai",
        "madden-v-openai",
        "shamblin-v-openai",
        "viktoria-chatgpt-poland-bbc",
        "peralta-v-character-ai",
        "raine-v-openai",
        "meta-big-sis-billie-wongbandue",
        "alex-taylor-chatgpt-juliet",
        "af-v-character-ai-texas",
        "garcia-v-character-ai-setzer",
        "belgium-chai-eliza-suicide"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "observed",
          "n": 28,
          "real_world": 28
        }
      ]
    },
    {
      "id": "surveillance-power",
      "source": "cais-2023",
      "group": "malicious-use",
      "section": "2.4",
      "page": 11,
      "title": "AI helps a few concentrate power through surveillance",
      "claim": "AI-powered surveillance, censorship and propaganda could let small groups lock in control over society.",
      "status": "early",
      "note": "One case: accounts linked to China used ChatGPT to build a tool that reports on protests abroad to the authorities. Most state surveillance never surfaces as a public security incident.",
      "n": 1,
      "real_world": 1,
      "first_real_world": "2025-02-21",
      "months_after_publication": 20,
      "url": "https://aithreat.io/research/surveillance-power/",
      "cases": [
        "openai-peer-review-qianyue"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "early",
          "n": 1,
          "real_world": 1
        }
      ]
    },
    {
      "id": "cyberattack-barrier",
      "source": "cais-2023",
      "group": "ai-race",
      "section": "3.1.2",
      "page": 15,
      "title": "AI makes cyberattacks easier, faster and larger",
      "claim": "AI could lower the barrier to entry for cyberattacks and increase their scale, speed and success, including against the infrastructure societies depend on.",
      "status": "observed",
      "note": "The best-documented prediction in the registry: novices building ransomware with chatbots, malware that asks a model what to do next, state groups using AI at every stage of an attack, and AI-written scripts probing industrial controllers.",
      "n": 87,
      "real_world": 86,
      "first_real_world": "2025-01-10",
      "months_after_publication": 19,
      "url": "https://aithreat.io/research/cyberattack-barrier/",
      "cases": [
        "papercut-ai-agents-credential-theft",
        "storm-3168-agentic-azure-attacks",
        "unit42-ai-espionage-gov-linux",
        "aepd-spain-first-ai-agent-breach",
        "ai-scripts-target-siemens-s7-plcs",
        "artex-ai-driven-korea-finance",
        "aurora-ransomware-cursor-agent-abuse",
        "chatgpt-feature-clickfix-trojan",
        "claudefix-shared-claude-chats",
        "closedquorum-autonomous-ai-c2",
        "divd-zammad-agentic-ai-attack",
        "meta-ai-model-exploits-flaw-in-eval",
        "ngate-variant-trojanized-nfc-app",
        "rathat-ai-c2-panel-maas",
        "ta419-ai-policy-expert-phishing",
        "uat-11985-taiwan-aitm-phishing",
        "unit42-agentic-attack-enterprise-breach",
        "unit42-latam-ai-tool-exfiltration-campai",
        "anthropic-gtg-10007-exploit-foundry",
        "anthropic-gtg-30006-iran-tooling",
        "anthropic-gtg-50029-eu-hacktivist",
        "anthropic-jackpoterz-russia",
        "anthropic-shinyhunters-agents",
        "gtig-sandworm-relic-gemini",
        "bitdefender-silkparasite-ai-rats",
        "cisa-aa26-231a-siemens-ai-scripts",
        "trend-ai-agent-pentest-pretext-sea",
        "trend-earth-krahang-naga-genai",
        "unit42-tuxbot-v3-llm-botnet",
        "sysdig-jadepuffer-agentic-ransomware",
        "chiba-teen-ai-ransomware-arrest",
        "sophos-cursor-edr-evasion-lab",
        "checkpoint-nimbus-manticore-minifast",
        "gtig-ai-built-2fa-zero-day",
        "gtig-apt45-cve-prompt-farm",
        "gtig-canfail-longstream-decoy",
        "gtig-promptspy-android",
        "gtig-unc2814-tplink-rce",
        "talos-softr-ai-phishing-page",
        "unit42-gpt4-gated-sliver-dropper",
        "ai-built-clickfix-smartrat",
        "microsoft-coral-sleet-agentic",
        "hp-wolf-vibe-hacking-2026",
        "zscaler-dust-specter-iraq",
        "mexico-gov-claude-breach",
        "gtig-coinbait-lovable-phish",
        "gtig-gemini-state-misuse",
        "gtig-honestcue-gemini-loader",
        "certfr-genai-threat-2026",
        "voidlink-ai-built",
        "unit42-wormgpt4-kawaiigpt",
        "anthropic-gtg-1002",
        "gtig-china-ctf-pretext",
        "gtig-muddywater-gemini-opsec",
        "gtig-promptflux",
        "gtig-quietvault-stealer",
        "microsoft-sesameop-backdoor",
        "kaspersky-bluenoroff-ghostcall",
        "openai-dprk-korean-c2-phishing",
        "openai-russian-rat-stealers",
        "openai-scam-centres-oct2025",
        "openai-unk-droppitch-taiwan",
        "microsoft-llm-svg-phishing",
        "malterminal-gpt4-malware",
        "kimsuky-chatgpt-military-id",
        "anthropic-nocode-raas",
        "anthropic-vibe-hacking",
        "promptlock-ransomware",
        "proofpoint-lovable-phishing",
        "kodane-npm-claude-drainer",
        "lamehug-apt28",
        "global-group-ai-negotiator",
        "wormgpt-grok-mixtral-variants",
        "openai-scopecreep-malware",
        "openai-vague-focus",
        "openai-vixen-keyhole-panda",
        "openai-wrong-number-task-scam",
        "fbi-ai-voice-us-officials",
        "anthropic-iot-camera-creds",
        "anthropic-novice-malware-builder",
        "anthropic-recruitment-fraud-2025",
        "akirabot-openai-spam",
        "xanthorox-ai-darknet",
        "openai-cambodia-romance-baiting",
        "openai-kimsuky-bluenoroff-rdp",
        "ghostgpt-criminal-chatbot",
        "funksec-ai-assisted-ransomware"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "observed",
          "n": 87,
          "real_world": 86
        }
      ]
    },
    {
      "id": "autonomous-weapons",
      "source": "cais-2023",
      "group": "ai-race",
      "section": "3.1.1",
      "page": 14,
      "title": "Militaries hand life-and-death decisions to AI",
      "claim": "An arms race could push militaries toward weapons that select and kill targets without a human decision, and toward automated warfare that escalates faster than people can intervene.",
      "status": "outside",
      "note": "Outside what a security incident registry can measure. Military uses of AI are rarely reported as incidents.",
      "n": 0,
      "real_world": 0,
      "first_real_world": null,
      "months_after_publication": null,
      "url": "https://aithreat.io/research/autonomous-weapons/",
      "cases": [

      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "outside",
          "n": 0,
          "real_world": 0
        }
      ]
    },
    {
      "id": "race-over-safety",
      "source": "cais-2023",
      "group": "ai-race",
      "section": "3.2.1",
      "page": 19,
      "title": "Companies ship AI before it is safe to win the race",
      "claim": "Competitive pressure pushes companies to release AI products first rather than safest, and to treat safety work as something to fix later.",
      "status": "early",
      "note": "Lawsuits by families and US states allege that a chatbot model was rushed to market with shortened safety testing. These are allegations, not court findings.",
      "n": 4,
      "real_world": 4,
      "first_real_world": "2025-11-06",
      "months_after_publication": 29,
      "url": "https://aithreat.io/research/race-over-safety/",
      "cases": [
        "eight-states-v-openai",
        "florida-ag-v-openai",
        "fsu-shooting-v-openai",
        "shamblin-v-openai"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "early",
          "n": 4,
          "real_world": 4
        }
      ]
    },
    {
      "id": "automated-economy",
      "source": "cais-2023",
      "group": "ai-race",
      "section": "3.2.2",
      "page": 20,
      "title": "Automation leaves society dependent on AI",
      "claim": "Companies replacing human labour with AI could cause mass unemployment and leave society unable to function without AI systems.",
      "status": "outside",
      "note": "An economic risk, outside what a security incident registry measures.",
      "n": 0,
      "real_world": 0,
      "first_real_world": null,
      "months_after_publication": null,
      "url": "https://aithreat.io/research/automated-economy/",
      "cases": [

      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "outside",
          "n": 0,
          "real_world": 0
        }
      ]
    },
    {
      "id": "evolutionary-pressure",
      "source": "cais-2023",
      "group": "ai-race",
      "section": "3.3",
      "page": 21,
      "title": "Competition selects for selfish AI",
      "claim": "Over the long run, competition between AI systems could favour those with selfish traits and gradually displace human control.",
      "status": "outside",
      "note": "A long-term dynamic that no single incident can show.",
      "n": 0,
      "real_world": 0,
      "first_real_world": null,
      "months_after_publication": null,
      "url": "https://aithreat.io/research/evolutionary-pressure/",
      "cases": [

      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "outside",
          "n": 0,
          "real_world": 0
        }
      ]
    },
    {
      "id": "leaked-or-stolen",
      "source": "cais-2023",
      "group": "organizational",
      "section": "4",
      "page": 34,
      "title": "Powerful AI gets leaked or stolen",
      "claim": "AI models could be leaked by accident or stolen by state, industry or criminal actors, which is why AI developers need state-of-the-art information security.",
      "status": "observed",
      "note": "Model weights have not been publicly reported stolen, but leaked keys exposed private models, outsiders reached a restricted model, source code shipped by accident, and AI companies accuse rivals of copying model capabilities through mass querying.",
      "n": 11,
      "real_world": 11,
      "first_real_world": "2025-01-29",
      "months_after_publication": 19,
      "url": "https://aithreat.io/research/leaked-or-stolen/",
      "cases": [
        "anthropic-gtg-16005-alibaba-distill",
        "anthropic-gtg-16006-zhipu-distill",
        "anthropic-gtg-16008-xiaomi-distill",
        "openai-tanstack-worm-breach",
        "mythos-unauthorized-access",
        "mercor-litellm-breach",
        "claude-code-leak-lures",
        "anthropic-distillation",
        "doge-xai-api-key-leak",
        "xai-key-leak-spacex-tesla-llms",
        "openai-deepseek-distillation"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "observed",
          "n": 11,
          "real_world": 11
        }
      ]
    },
    {
      "id": "accidents-normal",
      "source": "cais-2023",
      "group": "organizational",
      "section": "4.1",
      "page": 27,
      "title": "Accidents with AI are hard to avoid",
      "claim": "AI systems are complex and unreliable, so accidents are normal; the goal must be to stop accidents from cascading into disasters.",
      "status": "observed",
      "note": "Coding agents have wiped databases and drives, assistants have published private chats, and staff acting on an AI agent's advice exposed sensitive data.",
      "n": 15,
      "real_world": 15,
      "first_real_world": "2023-09-18",
      "months_after_publication": 3,
      "url": "https://aithreat.io/research/accidents-normal/",
      "cases": [
        "pixelleak-agent-screenshots",
        "meta-agent-data-exposure",
        "copilot-confidential-emails-bug",
        "antigravity-d-drive-wipe",
        "vyro-ai-elasticsearch-leak",
        "grok-chats-indexed",
        "chatgpt-shared-chats-indexed",
        "replit-agent-saastr-db-wipe",
        "doge-xai-api-key-leak",
        "asana-mcp-cross-tenant",
        "meta-ai-discover-feed",
        "xai-key-leak-spacex-tesla-llms",
        "korea-pipc-deepseek-prompt-transfer",
        "deepseek-db-exposure",
        "microsoft-ai-38tb-sas-token-exposure"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "observed",
          "n": 15,
          "real_world": 15
        }
      ]
    },
    {
      "id": "lab-safeguards-fail",
      "source": "cais-2023",
      "group": "organizational",
      "section": "4.2",
      "page": 29,
      "title": "AI developers' own safety measures fail",
      "claim": "Organisations building advanced AI may lack a strong safety culture, so tests, controls and warnings fail when they matter.",
      "status": "observed",
      "note": "Several AI developers and a government institute ran tests whose agents got out and reached real companies and government systems; some victims learned of it before the developer did.",
      "n": 12,
      "real_world": 12,
      "first_real_world": "2023-09-18",
      "months_after_publication": 3,
      "url": "https://aithreat.io/research/lab-safeguards-fail/",
      "cases": [
        "cert-in-ai-agents-indian-orgs-access",
        "aisi-eval-agent-attacks-third-parties",
        "gemini-breakout-hacks-three-companies",
        "meta-ai-model-exploits-flaw-in-eval",
        "openai-agent-hacks-australia-medicare",
        "tencent-cloud-agents-amap-scraping",
        "rubygems-openai-agent-swarm",
        "anthropic-eval-claude-pypi-malware",
        "openai-agent-hugging-face",
        "anthropic-model-false-philly-murder-tip",
        "deepseek-db-exposure",
        "microsoft-ai-38tb-sas-token-exposure"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "observed",
          "n": 12,
          "real_world": 12
        }
      ]
    },
    {
      "id": "proxy-gaming",
      "source": "cais-2023",
      "group": "rogue-ai",
      "section": "5.1",
      "page": 36,
      "title": "AI reaches its goal by means nobody intended",
      "claim": "AI given a measurable stand-in for what we want finds loopholes that satisfy the measure while missing the real goal.",
      "status": "early",
      "note": "Test agents that hit a block have reached for proxy servers, keys found in public code and other companies' systems to finish their task. This fits the pattern, though the reports rarely explain the agent's reasoning.",
      "n": 4,
      "real_world": 4,
      "first_real_world": "2026-07-21",
      "months_after_publication": 37,
      "url": "https://aithreat.io/research/proxy-gaming/",
      "cases": [
        "cert-in-ai-agents-indian-orgs-access",
        "tencent-cloud-agents-amap-scraping",
        "rubygems-openai-agent-swarm",
        "openai-agent-hugging-face"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "early",
          "n": 4,
          "real_world": 4
        }
      ]
    },
    {
      "id": "goal-drift",
      "source": "cais-2023",
      "group": "rogue-ai",
      "section": "5.2",
      "page": 37,
      "title": "AI's goals drift over time",
      "claim": "Even AI that starts with goals people endorse could see them change as it adapts, in ways that are hard to predict.",
      "status": "none",
      "note": "No verified case. The paper itself calls this its most speculative section.",
      "n": 0,
      "real_world": 0,
      "first_real_world": null,
      "months_after_publication": null,
      "url": "https://aithreat.io/research/goal-drift/",
      "cases": [

      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "none",
          "n": 0,
          "real_world": 0
        }
      ]
    },
    {
      "id": "power-seeking",
      "source": "cais-2023",
      "group": "rogue-ai",
      "section": "5.3",
      "page": 39,
      "title": "AI seeks more access and resources than it was given",
      "claim": "Gaining power and resources helps with almost any goal, so capable AI agents may seek them, through legitimate means, deception or force.",
      "status": "early",
      "note": "Agents in tests have escaped their sandboxes, used computing and accounts they were not given, and broken into outside systems. No case shows an AI seeking power for its own sake; each grabbed access while pursuing an assigned task.",
      "n": 6,
      "real_world": 6,
      "first_real_world": "2026-07-21",
      "months_after_publication": 37,
      "url": "https://aithreat.io/research/power-seeking/",
      "cases": [
        "gemini-breakout-hacks-three-companies",
        "meta-ai-model-exploits-flaw-in-eval",
        "openai-agent-hacks-australia-medicare",
        "rubygems-openai-agent-swarm",
        "anthropic-eval-claude-pypi-malware",
        "openai-agent-hugging-face"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "early",
          "n": 6,
          "real_world": 6
        }
      ]
    },
    {
      "id": "ai-deception",
      "source": "cais-2023",
      "group": "rogue-ai",
      "section": "5.4",
      "page": 41,
      "title": "AI deceives the people who oversee it",
      "claim": "AI could learn to appear under control while it is not, so monitoring alone cannot be relied on.",
      "status": "early",
      "note": "One verified case: after wiping a production database, a coding agent reported misleadingly on what it had done. Deliberate deception toward overseers is not yet established in a real incident.",
      "n": 1,
      "real_world": 1,
      "first_real_world": "2025-07-19",
      "months_after_publication": 25,
      "url": "https://aithreat.io/research/ai-deception/",
      "cases": [
        "replit-agent-saastr-db-wipe"
      ],
      "history": [
        {
          "date": "2026-10-18",
          "event": "start",
          "status": "early",
          "n": 1,
          "real_world": 1
        }
      ]
    }
  ],
  "status_counts": {
    "observed": 7,
    "early": 5,
    "lab": 0,
    "none": 2,
    "outside": 3
  },
  "matched_cases": 156,
  "total_cases": 356,
  "unmatched_pct": 56,
  "unmatched_by_category": [
    {
      "category": "Deepfake fraud",
      "unmatched": 80,
      "total": 84
    },
    {
      "category": "AI supply chain",
      "unmatched": 42,
      "total": 45
    },
    {
      "category": "Prompt injection",
      "unmatched": 27,
      "total": 27
    },
    {
      "category": "Model & data leak",
      "unmatched": 19,
      "total": 39
    },
    {
      "category": "Agent hijack",
      "unmatched": 14,
      "total": 26
    },
    {
      "category": "LLMjacking",
      "unmatched": 14,
      "total": 15
    },
    {
      "category": "State actor AI ops",
      "unmatched": 4,
      "total": 30
    },
    {
      "category": "AI-assisted malware",
      "unmatched": 0,
      "total": 47
    },
    {
      "category": "Chatbot harm",
      "unmatched": 0,
      "total": 27
    },
    {
      "category": "AI phishing",
      "unmatched": 0,
      "total": 16
    }
  ],
  "history_started": "2026-10-18"
}