{
  "generated_at": "2026-10-15T17:14:04Z",
  "total": 318,
  "trend_from": "2025-01-01",
  "this_quarter": {
    "q": "2026-Q4",
    "n": 31,
    "prev_q": "2026-Q3",
    "prev_n": 41
  },
  "direction": {
    "on-ai": 135,
    "with-ai": 183
  },
  "on_ai_share_first_half": 35,
  "on_ai_share_last_half": 52,
  "quarters": [
    {
      "q": "2025-Q1",
      "n": 30,
      "on-ai": 9,
      "with-ai": 21,
      "severity": {
        "critical": 1,
        "high": 14,
        "medium": 13,
        "low": 2
      },
      "autonomous": 0,
      "real_world": 29
    },
    {
      "q": "2025-Q2",
      "n": 33,
      "on-ai": 13,
      "with-ai": 20,
      "severity": {
        "critical": 2,
        "high": 13,
        "medium": 16,
        "low": 2
      },
      "autonomous": 0,
      "real_world": 30
    },
    {
      "q": "2025-Q3",
      "n": 56,
      "on-ai": 31,
      "with-ai": 25,
      "severity": {
        "critical": 3,
        "high": 28,
        "medium": 20,
        "low": 5
      },
      "autonomous": 1,
      "real_world": 35
    },
    {
      "q": "2025-Q4",
      "n": 35,
      "on-ai": 8,
      "with-ai": 27,
      "severity": {
        "critical": 5,
        "high": 13,
        "medium": 15,
        "low": 2
      },
      "autonomous": 1,
      "real_world": 30
    },
    {
      "q": "2026-Q1",
      "n": 45,
      "on-ai": 24,
      "with-ai": 21,
      "severity": {
        "critical": 4,
        "high": 21,
        "medium": 18,
        "low": 2
      },
      "autonomous": 0,
      "real_world": 36
    },
    {
      "q": "2026-Q2",
      "n": 44,
      "on-ai": 22,
      "with-ai": 22,
      "severity": {
        "critical": 7,
        "high": 20,
        "medium": 16,
        "low": 1
      },
      "autonomous": 0,
      "real_world": 39
    },
    {
      "q": "2026-Q3",
      "n": 41,
      "on-ai": 15,
      "with-ai": 26,
      "severity": {
        "critical": 8,
        "high": 26,
        "medium": 7,
        "low": 0
      },
      "autonomous": 3,
      "real_world": 38
    },
    {
      "q": "2026-Q4",
      "n": 31,
      "on-ai": 10,
      "with-ai": 21,
      "severity": {
        "critical": 1,
        "high": 11,
        "medium": 18,
        "low": 1
      },
      "autonomous": 4,
      "real_world": 30
    }
  ],
  "categories": [
    {
      "category": "Deepfake fraud",
      "n": 82,
      "by_quarter": [
        13,
        9,
        13,
        15,
        10,
        11,
        10,
        1
      ],
      "growth_last4_vs_prev4": -18
    },
    {
      "category": "AI supply chain",
      "n": 45,
      "by_quarter": [
        2,
        4,
        6,
        1,
        7,
        11,
        6,
        6
      ],
      "growth_last4_vs_prev4": 17
    },
    {
      "category": "AI-assisted malware",
      "n": 44,
      "by_quarter": [
        1,
        5,
        6,
        5,
        5,
        5,
        6,
        11
      ],
      "growth_last4_vs_prev4": 10
    },
    {
      "category": "Model & data leak",
      "n": 37,
      "by_quarter": [
        4,
        5,
        10,
        1,
        9,
        2,
        5,
        0
      ],
      "growth_last4_vs_prev4": -4
    },
    {
      "category": "State actor AI ops",
      "n": 30,
      "by_quarter": [
        4,
        1,
        4,
        6,
        4,
        3,
        6,
        2
      ],
      "growth_last4_vs_prev4": 0
    },
    {
      "category": "Prompt injection",
      "n": 27,
      "by_quarter": [
        1,
        3,
        8,
        4,
        3,
        3,
        2,
        3
      ],
      "growth_last4_vs_prev4": -5
    },
    {
      "category": "Agent hijack",
      "n": 23,
      "by_quarter": [
        0,
        0,
        7,
        1,
        3,
        5,
        4,
        3
      ],
      "growth_last4_vs_prev4": 7
    },
    {
      "category": "AI phishing",
      "n": 16,
      "by_quarter": [
        2,
        5,
        2,
        1,
        2,
        1,
        0,
        3
      ],
      "growth_last4_vs_prev4": -4
    },
    {
      "category": "LLMjacking",
      "n": 14,
      "by_quarter": [
        3,
        1,
        0,
        1,
        2,
        3,
        2,
        2
      ],
      "growth_last4_vs_prev4": 4
    }
  ],
  "rising_category": "AI supply chain",
  "top_category": "Deepfake fraud",
  "top_category_n": 82,
  "autonomous": {
    "by_year": {
      "2025": 2,
      "2026": 7
    },
    "ids": [
      "replit-agent-saastr-db-wipe",
      "antigravity-d-drive-wipe",
      "openai-agent-hugging-face",
      "anthropic-eval-claude-pypi-malware",
      "rubygems-openai-agent-swarm",
      "openai-agent-hacks-australia-medicare",
      "meta-ai-model-exploits-flaw-in-eval",
      "gemini-breakout-hacks-three-companies",
      "aisi-eval-agent-attacks-third-parties"
    ]
  },
  "actors": [
    {
      "actor_type": "criminal",
      "by_year": {
        "2025": 82,
        "2026": 70
      },
      "n": 152
    },
    {
      "actor_type": "state",
      "by_year": {
        "2025": 17,
        "2026": 21
      },
      "n": 38
    },
    {
      "actor_type": "researcher",
      "by_year": {
        "2025": 30,
        "2026": 18
      },
      "n": 48
    },
    {
      "actor_type": "unknown",
      "by_year": {
        "2025": 13,
        "2026": 40
      },
      "n": 55
    },
    {
      "actor_type": "autonomous-ai",
      "by_year": {
        "2025": 2,
        "2026": 7
      },
      "n": 9
    },
    {
      "actor_type": "accident",
      "by_year": {
        "2025": 9,
        "2026": 3
      },
      "n": 13
    },
    {
      "actor_type": "hacktivist",
      "by_year": {
        "2025": 1,
        "2026": 1
      },
      "n": 2
    },
    {
      "actor_type": "insider",
      "by_year": {
        "2025": 0,
        "2026": 1
      },
      "n": 1
    }
  ],
  "years": [
    "2025",
    "2026"
  ],
  "severity": {
    "critical": 31,
    "high": 149,
    "medium": 123,
    "low": 15
  },
  "critical_high_pct": 57,
  "losses": {
    "total_usd": 224947543,
    "disclosed": 31,
    "by_category": [
      {
        "category": "Deepfake fraud",
        "usd": 223847543,
        "disclosed": 29
      },
      {
        "category": "AI supply chain",
        "usd": 500000,
        "disclosed": 1
      },
      {
        "category": "AI-assisted malware",
        "usd": 0,
        "disclosed": 0
      },
      {
        "category": "Model & data leak",
        "usd": 0,
        "disclosed": 0
      },
      {
        "category": "State actor AI ops",
        "usd": 0,
        "disclosed": 0
      },
      {
        "category": "Prompt injection",
        "usd": 0,
        "disclosed": 0
      },
      {
        "category": "Agent hijack",
        "usd": 0,
        "disclosed": 0
      },
      {
        "category": "AI phishing",
        "usd": 0,
        "disclosed": 0
      },
      {
        "category": "LLMjacking",
        "usd": 600000,
        "disclosed": 1
      }
    ],
    "deepfake_share_pct": 100
  },
  "sectors": [
    {
      "sector": "Technology & AI vendors",
      "n": 130
    },
    {
      "sector": "Individuals & consumers",
      "n": 84
    },
    {
      "sector": "Multiple / cross-sector",
      "n": 40
    },
    {
      "sector": "Unknown",
      "n": 18
    },
    {
      "sector": "Government & public sector",
      "n": 12
    },
    {
      "sector": "Financial services",
      "n": 11
    },
    {
      "sector": "Defence & security",
      "n": 9
    },
    {
      "sector": "Politics & elections",
      "n": 4
    },
    {
      "sector": "Education & research",
      "n": 3
    },
    {
      "sector": "Media & entertainment",
      "n": 3
    },
    {
      "sector": "Energy, industrial & infrastructure",
      "n": 2
    },
    {
      "sector": "Retail & consumer brands",
      "n": 2
    }
  ],
  "countries": [
    {
      "country": "GL",
      "n": 141
    },
    {
      "country": "US",
      "n": 67
    },
    {
      "country": "CN",
      "n": 7
    },
    {
      "country": "IL",
      "n": 7
    },
    {
      "country": "KR",
      "n": 5
    },
    {
      "country": "TW",
      "n": 4
    },
    {
      "country": "ZA",
      "n": 4
    },
    {
      "country": "GB",
      "n": 4
    },
    {
      "country": "SE",
      "n": 4
    },
    {
      "country": "FR",
      "n": 4
    },
    {
      "country": "IN",
      "n": 4
    },
    {
      "country": "MX",
      "n": 3
    }
  ],
  "global_pct": 44,
  "status": [
    {
      "status": "under investigation",
      "n": 81
    },
    {
      "status": "ongoing",
      "n": 74
    },
    {
      "status": "contained",
      "n": 62
    },
    {
      "status": "patched",
      "n": 54
    },
    {
      "status": "resolved",
      "n": 30
    },
    {
      "status": "unresolved",
      "n": 17
    }
  ],
  "unresolved_pct": 54,
  "verify_median_hours": 19.8,
  "verify_sample": 34,
  "researcher_demos": 48,
  "pulse": [
    {
      "day": "2026-10-01",
      "kinds": {
        "incident": 1,
        "vulnerability": 0,
        "research": 0,
        "vendor-report": 0,
        "policy": 0,
        "other": 0,
        "untagged": 0
      }
    },
    {
      "day": "2026-10-02",
      "kinds": {
        "incident": 1,
        "vulnerability": 1,
        "research": 1,
        "vendor-report": 1,
        "policy": 1,
        "other": 0,
        "untagged": 0
      }
    },
    {
      "day": "2026-10-03",
      "kinds": {
        "incident": 0,
        "vulnerability": 1,
        "research": 1,
        "vendor-report": 0,
        "policy": 1,
        "other": 0,
        "untagged": 4
      }
    },
    {
      "day": "2026-10-04",
      "kinds": {
        "incident": 0,
        "vulnerability": 0,
        "research": 2,
        "vendor-report": 0,
        "policy": 0,
        "other": 0,
        "untagged": 3
      }
    },
    {
      "day": "2026-10-05",
      "kinds": {
        "incident": 0,
        "vulnerability": 0,
        "research": 0,
        "vendor-report": 0,
        "policy": 0,
        "other": 0,
        "untagged": 9
      }
    },
    {
      "day": "2026-10-06",
      "kinds": {
        "incident": 0,
        "vulnerability": 0,
        "research": 1,
        "vendor-report": 0,
        "policy": 0,
        "other": 0,
        "untagged": 11
      }
    },
    {
      "day": "2026-10-07",
      "kinds": {
        "incident": 1,
        "vulnerability": 1,
        "research": 0,
        "vendor-report": 0,
        "policy": 0,
        "other": 2,
        "untagged": 18
      }
    },
    {
      "day": "2026-10-08",
      "kinds": {
        "incident": 1,
        "vulnerability": 25,
        "research": 2,
        "vendor-report": 0,
        "policy": 0,
        "other": 0,
        "untagged": 14
      }
    },
    {
      "day": "2026-10-09",
      "kinds": {
        "incident": 0,
        "vulnerability": 0,
        "research": 0,
        "vendor-report": 0,
        "policy": 0,
        "other": 0,
        "untagged": 24
      }
    },
    {
      "day": "2026-10-10",
      "kinds": {
        "incident": 0,
        "vulnerability": 0,
        "research": 0,
        "vendor-report": 0,
        "policy": 0,
        "other": 0,
        "untagged": 30
      }
    },
    {
      "day": "2026-10-11",
      "kinds": {
        "incident": 0,
        "vulnerability": 0,
        "research": 0,
        "vendor-report": 0,
        "policy": 0,
        "other": 2,
        "untagged": 1
      }
    },
    {
      "day": "2026-10-12",
      "kinds": {
        "incident": 0,
        "vulnerability": 0,
        "research": 0,
        "vendor-report": 0,
        "policy": 0,
        "other": 5,
        "untagged": 32
      }
    },
    {
      "day": "2026-10-13",
      "kinds": {
        "incident": 1,
        "vulnerability": 2,
        "research": 4,
        "vendor-report": 1,
        "policy": 1,
        "other": 1,
        "untagged": 144
      }
    },
    {
      "day": "2026-10-14",
      "kinds": {
        "incident": 6,
        "vulnerability": 2,
        "research": 65,
        "vendor-report": 2,
        "policy": 1,
        "other": 9,
        "untagged": 110
      }
    },
    {
      "day": "2026-10-15",
      "kinds": {
        "incident": 6,
        "vulnerability": 3,
        "research": 22,
        "vendor-report": 8,
        "policy": 3,
        "other": 15,
        "untagged": 0
      }
    }
  ]
}