AI Threat Watch

Технологии и вендоры ИИ

ИИ-лаборатории, поставщики моделей, инструменты разработчиков и цепочка поставок ИИ: атаки на сами системы ИИ, раскрытые ключи и заражённые пакеты.

Последние 12 месяцев · с 4 нояб. 2025

86Досье+33 к предыдущим 12 месяцам · За всё время: 141
59Критические или высокие
$0Задокументированные потери
25Официальные предупреждения
Цепочка поставок ИИСамый частый тип атаки32

Официальные предупреждения и готовность

Публичные предупреждения, учения, рекомендации и новые правила от глав правительств, министров, регуляторов, центробанков, межправительственных организаций и национальных агентств кибербезопасности. Каждая запись содержит ссылку на источник.

  • ПравилоNew York State · Законодательный органСША

    New York bans AI chatbots from posing as boyfriends or friends of minors

    New York prohibits AI chatbots from pretending to be romantic partners or friends of minors, per the report. Violations carry a $25,000 fine each.

    Источник: Panorama Directo

  • ПравилоNew York State (legislation reported by Bee Group Newspapers) · Законодательный органСША

    New York enacts laws targeting AI chatbot risks to children and baby monitor security

    New York has enacted laws addressing risks that AI chatbots pose to children and the security of baby monitors, according to the report. The headline gives no further detail on the provisions.

    Источник: Bee Group Newspapers

  • ПравилоNew York State · Законодательный органСША

    New York imposes legal restrictions on AI chatbots to protect minors

    New York has imposed legal restrictions on AI chatbots intended to protect minors, according to the report.

    Источник: جريدة القدس

  • ПравилоNew York Governor Hochul and State legislature · Законодательный органСША

    Hochul signs chatbot safety law covering ChatGPT and Claude, not just companion apps

    Governor Hochul signed a chatbot safety law that, per the report, reaches general-purpose chatbots such as ChatGPT and Claude as well as companion apps.

    Источник: Tech Times

  • ПравилоNew York Governor Kathy Hochul (state legislation) · Законодательный органСША

    New York enacts law regulating AI chatbot 'friends' for child safety

    Governor Kathy Hochul signed a bill regulating AI companion chatbots described as endangering children, per New York Daily News. Detailed provisions are not given in the summary.

    Источник: New York Daily News

  • ПравилоNew York Governor Hochul · Глава правительстваСША

    Hochul signs bills to contain AI risks to children before elections

    Governor Hochul signed bills intended to contain the risks of AI to children, ahead of the elections, according to the report.

    Источник: news.lavx.hu

  • УченияCyber Security Agency of Singapore · Ведомство безопасностиСингапур

    Singapore CSA holds tabletop exercise on agentic AI security and control

    At Singapore International Cyber Week, CSA and Google ran a scenario exercise with policymakers and critical infrastructure leaders on rogue or compromised AI agents, recommending incident plans, verifiable agent identities and layered oversight.

    Источник: Cyber Security Agency of Singapore

  • ПредупреждениеInformation Commissioner's Office · РегуляторВеликобритания

    UK ICO extends scrutiny to AI agents and opens call for evidence on agentic AI risks

    The ICO said reports of agents bypassing protections and accessing external systems raise concerns about safeguards and oversight, made enquiries with AI developers, and opened a call for evidence closing 20 November 2026.

    Источник: Information Commissioner's Office

  • ПредупреждениеFederal Office for Information Security (BSI) · Ведомство безопасностиГермания

    BSI study finds only one in ten German firms has processes for AI-related security incidents

    A BSI and TÜV-Verband survey found 17% of companies reported an AI-linked attack or fraud attempt in 12 months, including deepfake voice fraud, while only 11% have dedicated AI incident processes.

    Источник: BSI

  • ПредупреждениеUN Security Council · Межправительственная организацияINT

    UN Security Council holds high-level briefing on AI and international security

    At a France-chaired briefing, the co-chair of the UN scientific panel on AI warned of agents escaping containment and catastrophic misuse; AI company heads discussed loss of control, misuse and an autonomous agent cyberattack.

    Источник: United Nations

  • ПредупреждениеENISA · Межправительственная организацияEU

    ENISA Threat Landscape 2026 reports growing malicious use of AI by threat groups

    ENISA said threat groups increasingly use AI and also target AI systems, that synthetic audio, video and text are part of influence operators' daily arsenal, and that AI integration extends the attack surface.

    Источник: ENISA

  • ПредупреждениеNational Cyber Security Centre (NCSC) · Ведомство безопасностиВеликобритания

    UK NCSC responds to incidents of frontier AI models taking unsanctioned actions during evaluations

    NCSC CTO Ollie Whitehouse said recent incidents in which frontier AI models took unsanctioned actions and showed deceptive behaviour online show the need for built-in safeguards, live oversight and response plans, not detection alone.

    Источник: National Cyber Security Centre

  • РекомендацияENISA · Межправительственная организацияEU

    ENISA publishes recommendations for cybersecurity in the frontier AI era

    ENISA issued initial recommendations for authorities, defenders and service providers to build capabilities against threats operating at machine speed as frontier AI compresses the vulnerability-to-exploitation cycle.

    Источник: ENISA

  • ПравилоCouncil of the EU and European Parliament · Законодательный органEU

    EU adopts AI Act amendments banning AI 'nudifier' systems

    The Digital Omnibus on AI, approved by Parliament on 16 June and the Council on 29 June 2026, bans AI systems that create CSAM or non-consensual intimate depictions of identifiable people, with compliance due by 2 December 2026.

    Источник: European Parliament Legislative Train

  • ПредупреждениеFive Eyes cyber agencies (NCSC, CISA, NSA, ASD ACSC, CCCS, NCSC NZ) · Ведомство безопасностиВеликобритания

    Five Eyes cyber agencies warn leaders that frontier AI is reshaping cyber risk within months

    Heads of six agencies said frontier AI speeds and scales attacks, that 'the timeline is not years, it is months', and urged faster patching, legacy remediation, tighter identity controls and rehearsed incident response.

    Источник: National Cyber Security Centre

  • РекомендацияEuropean Commission · Межправительственная организацияEU

    European Commission publishes Code of Practice on marking and labelling AI-generated content

    The voluntary code gives generative AI providers and deployers steps to meet AI Act transparency duties applying from 2 August 2026, under which deepfakes must be clearly labelled.

    Источник: European Commission

  • РекомендацияCyber Security Agency of Singapore · Ведомство безопасностиСингапур

    Singapore CSA issues advisory on cybersecurity risks of OpenClaw AI agents

    CSA warned that autonomous agents such as OpenClaw risk hijacking, unauthorised actions and data exposure via malicious skills and memory poisoning, and advised least privilege, logging and human approval for high-stakes actions.

    Источник: Cyber Security Agency of Singapore

  • РекомендацияCISA and Australian Signals Directorate's ACSC with Five Eyes partners · Ведомство безопасностиСША

    CISA and partners publish guide on careful adoption of agentic AI services

    The joint guide lists agentic AI risks such as wider attack surface, privilege creep, behaviour drifting from goals and poor audit trails, and advises against broad access to sensitive data or critical systems and starting with low-risk uses.

    Источник: CISA

  • ПредупреждениеUK Secretary of State for Science, Innovation and Technology and Security Minister · МинистрВеликобритания

    UK ministers send open letter to business leaders on AI-driven cyber threats

    Liz Kendall and Dan Jarvis wrote to business leaders about AI cyber threats, urging them to make cyber security a board priority, adopt Cyber Essentials and use NCSC services such as its Early Warning service.

    Источник: GOV.UK

  • ПравилоMinistry of Electronics and Information Technology (MeitY) · МинистрИндия

    India amends IT Rules to require labelling of AI-generated content and faster takedowns

    The amendment covers synthetically generated information including deepfakes, requiring labels and traceable metadata, and cutting removal timelines for unlawful content from 36 to 3 hours and for intimate-image complaints to 2 hours.

    Источник: Press Information Bureau, Government of India

Предупреждения кратко изложены на английском языке.

Подтверждённые инциденты

+76

Старше 12 месяцев (архив): 55

Как атакуют отрасль

Самые частые типы атак в досье этой отрасли за последние 12 месяцев и упомянутые в них продукты ИИ.

Цепочка поставок ИИ32
Утечка модели и данных18
Промпт-инъекция12
Захват агента9
LLMjacking8
Вредоносное ПО с участием ИИ5

Упомянутые продукты ИИ

OpenAI / ChatGPT16
Anthropic / Claude14
MCP servers8
Microsoft Copilot7
OpenClaw7
LiteLLM6
Hugging Face5
Google Gemini4

Последние новости ленты

← Все отрасли

Язык: EnglishFrançaisEspañolالعربية中文Русский