{
  "snapshot_date": "2026-10-22",
  "method": "Unweighted, analyst-coded bipartite issue-to-exposure-domain graph. Edge means a primary mechanism or response domain in the source; not a causal, exploit, organizational or victim-overlap link.",
  "limitations": [
    "26 source topics become 24 themes after merging PHP 01/12 and eMudhra/Tailscale 06/26.",
    "The partly verified iPhone watch item is excluded: baseline has 23 themes, including policy, guidance and research.",
    "No common actor, coordinated campaign or cross-vendor exploit chain is inferred.",
    "Connectivity is model-dependent and is not a measure of likelihood, severity, affected users or loss.",
    "Actual organizational coupling requires asset, credential, supplier, trust-store and recovery-dependency inventories."
  ],
  "hubs": {
    "identity": "Credentials and authorization",
    "software": "Software execution and delivery",
    "ai": "AI tools and model dependency",
    "trust": "Network and certificate trust",
    "data": "Data exposure and isolation",
    "continuity": "Service continuity"
  },
  "risks": [
    {
      "id": "r01",
      "source_items": [
        1,
        12
      ],
      "label": "PHP and legacy PHP",
      "domains": [
        "software"
      ],
      "watch_only": false,
      "evidence": "Confirmed; patches released",
      "scope_note": "Merge source items 01 and 12; patchability is the common mechanism.",
      "sources": [
        [
          "PHP release advisory",
          "https://www.php.net/archive/2026.php"
        ],
        [
          "CERT-EU 2026-018",
          "https://cert.europa.eu/publications/security-advisories/2026-018"
        ]
      ]
    },
    {
      "id": "r02",
      "source_items": [
        2
      ],
      "label": "GCP London",
      "domains": [
        "continuity"
      ],
      "watch_only": false,
      "evidence": "Confirmed power outage",
      "scope_note": "Power-related cloud unavailability; no cyberattack attribution.",
      "sources": [
        [
          "Google incident report",
          "https://status.cloud.google.com/incidents/Xs2XTHzAVC9YnafnPyzj"
        ],
        [
          "UK Treasury Committee",
          "https://committees.parliament.uk/committee/158/treasury-committee/news/218364/google-cloud-outage-bank-of-england-and-fca-letter-published/"
        ]
      ]
    },
    {
      "id": "r03",
      "source_items": [
        3
      ],
      "label": "Cairn",
      "domains": [
        "software",
        "ai",
        "data"
      ],
      "watch_only": false,
      "evidence": "Researcher observations",
      "scope_note": "Research documents agents exploiting applications and targeting payment/data theft; no specific exploit tie to the new PHP or Node CVEs.",
      "sources": [
        [
          "NorForge investigation",
          "https://norforge.com/blog/inside_cairn"
        ]
      ]
    },
    {
      "id": "r04",
      "source_items": [
        4
      ],
      "label": "DeepSeek federal policy",
      "domains": [
        "ai"
      ],
      "watch_only": false,
      "evidence": "Official government order",
      "scope_note": "Covered organizations must identify and replace restricted model dependencies; applicability is conditional.",
      "sources": [
        [
          "Federal Register order notice",
          "https://www.govinfo.gov/content/pkg/FR-2026-10-20/html/2026-21447.htm"
        ]
      ]
    },
    {
      "id": "r05",
      "source_items": [
        5
      ],
      "label": "AI agent governance",
      "domains": [
        "identity",
        "ai",
        "data"
      ],
      "watch_only": false,
      "evidence": "Vendor guidance",
      "scope_note": "Guidance concerns delegated permissions, tools and sensitive information; not a single breach.",
      "sources": [
        [
          "Microsoft: Securing the agentic insider",
          "https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/"
        ]
      ]
    },
    {
      "id": "r06",
      "source_items": [
        6,
        26
      ],
      "label": "eMudhra / Tailscale remediation",
      "domains": [
        "software",
        "trust"
      ],
      "watch_only": false,
      "evidence": "Confirmed trust incident",
      "scope_note": "One certificate incident and its Tailscale software response; not a separate Tailscale breach. Standard WireGuard mesh traffic is unaffected.",
      "sources": [
        [
          "Cloudflare response",
          "https://blog.cloudflare.com/emudhra-certificate-compromise/"
        ],
        [
          "Thread supplement",
          "https://x.com/niccolox/status/2112947873109401691"
        ],
        [
          "Tailscale security bulletin TS 2026 013",
          "https://tailscale.com/security-bulletins"
        ]
      ]
    },
    {
      "id": "r07",
      "source_items": [
        7
      ],
      "label": "OpenCode Console",
      "domains": [
        "identity",
        "ai"
      ],
      "watch_only": false,
      "evidence": "Vendor-confirmed breach",
      "scope_note": "Exposure concerns a subset of linked AI-provider credentials, not every local installation.",
      "sources": [
        [
          "OpenCode incident statement",
          "https://x.com/opencode/status/2111519637049319818"
        ]
      ]
    },
    {
      "id": "r08",
      "source_items": [
        8
      ],
      "label": "Lightning AI",
      "domains": [
        "identity",
        "ai",
        "continuity"
      ],
      "watch_only": false,
      "evidence": "Vendor-confirmed incident",
      "scope_note": "Platform credential exposure and platform shutdown; not all Lightning services.",
      "sources": [
        [
          "Lightning incident notice",
          "https://lightning.ai/blog/oct-2026-incident/"
        ]
      ]
    },
    {
      "id": "r09",
      "source_items": [
        9
      ],
      "label": "PingCAP / TiDB Cloud",
      "domains": [
        "identity",
        "data"
      ],
      "watch_only": false,
      "evidence": "Vendor-confirmed exposure",
      "scope_note": "Stolen service-account credentials and customer-record exposure; no established compromise of data stored in TiDB.",
      "sources": [
        [
          "PingCAP incident report",
          "https://www.pingcap.com/trust-hub/security/security-update-october-2026/"
        ],
        [
          "Customer actions",
          "https://www.pingcap.com/ko/trust-hub/security/customer-actions-october-2026/"
        ],
        [
          "Thread item 9",
          "https://x.com/niccolox/status/2112815663693877441"
        ]
      ]
    },
    {
      "id": "r10",
      "source_items": [
        10
      ],
      "label": "LiteLLM 1.107.0",
      "domains": [
        "identity",
        "software",
        "ai"
      ],
      "watch_only": false,
      "evidence": "Research-confirmed malware",
      "scope_note": "Malicious distributed artifacts collect provider, developer and cloud credentials.",
      "sources": [
        [
          "JFrog investigation",
          "https://research.jfrog.com/post/litellm-hijacked-again/"
        ],
        [
          "Thread item 10",
          "https://x.com/niccolox/status/2112945813542637969"
        ]
      ]
    },
    {
      "id": "r11",
      "source_items": [
        11
      ],
      "label": "iPhone attack claims",
      "domains": [
        "software",
        "trust"
      ],
      "watch_only": true,
      "evidence": "Claim; partly corroborated",
      "scope_note": "Proposed Bluetooth chain and Cellebrite attribution remain partly unverified; exclude from baseline connectivity.",
      "sources": [
        [
          "Underlying research",
          "https://justin.sh/blog/2026/10/cellebrite-advanced-unlocks/"
        ],
        [
          "Apple security bulletin",
          "https://support.apple.com/en-us/149041"
        ],
        [
          "Thread item 11",
          "https://x.com/niccolox/status/2112949467997708683"
        ]
      ]
    },
    {
      "id": "r13",
      "source_items": [
        13
      ],
      "label": "LLMjacking",
      "domains": [
        "identity",
        "ai"
      ],
      "watch_only": false,
      "evidence": "Honeypot observations",
      "scope_note": "Research on abuse of model endpoints and inference access; not a confirmed universal victim count.",
      "sources": [
        [
          "Symantec/Broadcom research",
          "https://www.security.com/threat-intelligence/ai-llmjacking-skynet"
        ],
        [
          "Thread item 13",
          "https://x.com/niccolox/status/2112953688990085334"
        ]
      ]
    },
    {
      "id": "r14",
      "source_items": [
        14
      ],
      "label": "AI-generated code",
      "domains": [
        "identity",
        "software",
        "ai",
        "data"
      ],
      "watch_only": false,
      "evidence": "Expert warning / case example",
      "scope_note": "Engineering-risk example centers on authorization and cross-user document isolation.",
      "sources": [
        [
          "Original commentary",
          "https://x.com/oegerikus/status/2112812380505751680"
        ],
        [
          "Thread item “14”",
          "https://x.com/niccolox/status/2112955132384251949"
        ]
      ]
    },
    {
      "id": "r15",
      "source_items": [
        15
      ],
      "label": "Node.js",
      "domains": [
        "software",
        "trust"
      ],
      "watch_only": false,
      "evidence": "Confirmed; patches released",
      "scope_note": "Runtime security fixes include eMudhra certificate-trust changes.",
      "sources": [
        [
          "Node.js security release",
          "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases"
        ],
        [
          "Thread item “14 nodejs”",
          "https://x.com/niccolox/status/2112955625340801508"
        ]
      ]
    },
    {
      "id": "r16",
      "source_items": [
        16
      ],
      "label": "Cisco Smart Install",
      "domains": [
        "identity",
        "trust"
      ],
      "watch_only": false,
      "evidence": "Established configuration risk",
      "scope_note": "Legacy unauthenticated network-provisioning exposure; not a new October 2026 incident.",
      "sources": [
        [
          "NSA advisory",
          "https://www.nsa.gov/portals/75/documents/what-we-do/cybersecurity/professional-resources/csa-cisco-smart-install-protocol-misuse.pdf?v=1"
        ],
        [
          "Cisco guidance",
          "https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20180409-smi.html"
        ],
        [
          "Thread item 16",
          "https://x.com/niccolox/status/2112957991284826273"
        ]
      ]
    },
    {
      "id": "r17",
      "source_items": [
        17
      ],
      "label": "Railway environment secrets",
      "domains": [
        "identity",
        "ai",
        "continuity"
      ],
      "watch_only": false,
      "evidence": "Vendor notice; scope under review",
      "scope_note": "Possible exposure of customer environment secrets; rotate all stored credentials and review downstream use. Initial notice paused deployments.",
      "sources": [
        [
          "Railway disclosure",
          "https://blog.railway.com/p/security-disclosure-wednesday-october-21st"
        ]
      ]
    },
    {
      "id": "r18",
      "source_items": [
        18
      ],
      "label": "Zeabur infrastructure breach",
      "domains": [
        "identity",
        "data"
      ],
      "watch_only": false,
      "evidence": "Vendor-confirmed intrusion",
      "scope_note": "Internal credentials opened shared infrastructure and customer secrets. Rotate stored passwords and keys; investigate affected workloads and databases.",
      "sources": [
        [
          "Zeabur preliminary report",
          "https://zeabur.com/blogs/october-2026-security-incident"
        ]
      ]
    },
    {
      "id": "r19",
      "source_items": [
        19
      ],
      "label": "OVHcloud CLI release assets",
      "domains": [
        "identity",
        "software",
        "ai"
      ],
      "watch_only": false,
      "evidence": "Vendor-confirmed artifact replacement",
      "scope_note": "Official release binaries were replaced during a short download window. Check artifact hashes and accessible secrets; source-code review alone cannot establish safety.",
      "sources": [
        [
          "OVHcloud advisory",
          "https://github.com/ovh/ovhcloud-cli/security/advisories/GHSA-862f-55f5-vmvw"
        ]
      ]
    },
    {
      "id": "r20",
      "source_items": [
        20
      ],
      "label": "Rank Math PRO plugin malware",
      "domains": [
        "identity",
        "software"
      ],
      "watch_only": false,
      "evidence": "Vendor-confirmed package compromise",
      "scope_note": "Malware reached a subset of PRO 3.0.123 downloads. Activated copies require full site recovery and credential replacement, beyond a plugin update.",
      "sources": [
        [
          "Rank Math recovery guidance",
          "https://rankmath.com/kb/pro-3-0-123-security-incident/"
        ],
        [
          "Wordfence analysis",
          "https://www.wordfence.com/blog/2026/10/rank-math-seo-pro-3-0-123-malware/"
        ]
      ]
    },
    {
      "id": "r21",
      "source_items": [
        21
      ],
      "label": "TeamUpdraft data and site access",
      "domains": [
        "identity",
        "software",
        "data"
      ],
      "watch_only": false,
      "evidence": "Vendor notice; connected-site abuse",
      "scope_note": "Customer records and connection keys were exposed; the vendor also reports connected-site abuse. Reset access and inspect sites, including Premium installations.",
      "sources": [
        [
          "TeamUpdraft incident and customer actions",
          "https://teamupdraft.com/blog/security-incident-october-2026/"
        ]
      ]
    },
    {
      "id": "r22",
      "source_items": [
        22
      ],
      "label": "ConnectWise backup identities",
      "domains": [
        "identity",
        "data",
        "continuity"
      ],
      "watch_only": false,
      "evidence": "Vendor-confirmed identity incident",
      "scope_note": "Backup application credentials were compromised. Review each Microsoft 365 tenant and keep affected connections disabled pending service-specific restoration instructions.",
      "sources": [
        [
          "ConnectWise Trust Center and remediation guide",
          "https://www.connectwise.com/company/trust/advisories"
        ]
      ]
    },
    {
      "id": "r23",
      "source_items": [
        23
      ],
      "label": "Tensorlake npm compromise",
      "domains": [
        "identity",
        "software",
        "ai"
      ],
      "watch_only": false,
      "evidence": "Maintainer-confirmed malware",
      "scope_note": "Malicious npm 0.5.144 could steal credentials. Isolate hosts and remove the destructive token-monitor service before GitHub-token revocation, following the advisory.",
      "sources": [
        [
          "Tensorlake advisory and recovery sequence",
          "https://github.com/tensorlakeai/tensorlake/security/advisories/GHSA-8g63-53c9-65j2"
        ]
      ]
    },
    {
      "id": "r24",
      "source_items": [
        24
      ],
      "label": "SubQuery npm backdoor",
      "domains": [
        "identity",
        "software"
      ],
      "watch_only": false,
      "evidence": "Independent technical analysis",
      "scope_note": "@subql/common 5.8.3 contained a credential stealer and backdoor. Check transitive dependencies; both installation and import can trigger it.",
      "sources": [
        [
          "StepSecurity investigation",
          "https://www.stepsecurity.io/blog/subql-ecosystem-compromised"
        ],
        [
          "GMO Flatt Security analysis",
          "https://flatt.tech/research/posts/subql-common-npm-supply-chain-attack/"
        ]
      ]
    },
    {
      "id": "r25",
      "source_items": [
        25
      ],
      "label": "GhostAction workflow injection",
      "domains": [
        "identity",
        "software",
        "ai"
      ],
      "watch_only": false,
      "evidence": "Research-observed ongoing campaign",
      "scope_note": "Compromised accounts injected secret-stealing workflows. Remove implants and revoke both the entry credential and exposed CI secrets.",
      "sources": [
        [
          "GitGuardian campaign tracking",
          "https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/"
        ]
      ]
    }
  ],
  "baseline": {
    "themes": 23,
    "domains": 6,
    "edges": 55,
    "components": 1,
    "hub_degree": {
      "identity": 17,
      "software": 12,
      "ai": 12,
      "trust": 3,
      "data": 7,
      "continuity": 4
    },
    "hub_overlap": [
      {
        "a": "identity",
        "b": "software",
        "shared_issues": 8,
        "issues": [
          "LiteLLM 1.107.0",
          "AI-generated code",
          "OVHcloud CLI release assets",
          "Rank Math PRO plugin malware",
          "TeamUpdraft data and site access",
          "Tensorlake npm compromise",
          "SubQuery npm backdoor",
          "GhostAction workflow injection"
        ]
      },
      {
        "a": "identity",
        "b": "ai",
        "shared_issues": 10,
        "issues": [
          "AI agent governance",
          "OpenCode Console",
          "Lightning AI",
          "LiteLLM 1.107.0",
          "LLMjacking",
          "AI-generated code",
          "Railway environment secrets",
          "OVHcloud CLI release assets",
          "Tensorlake npm compromise",
          "GhostAction workflow injection"
        ]
      },
      {
        "a": "identity",
        "b": "trust",
        "shared_issues": 1,
        "issues": [
          "Cisco Smart Install"
        ]
      },
      {
        "a": "identity",
        "b": "data",
        "shared_issues": 6,
        "issues": [
          "AI agent governance",
          "PingCAP / TiDB Cloud",
          "AI-generated code",
          "Zeabur infrastructure breach",
          "TeamUpdraft data and site access",
          "ConnectWise backup identities"
        ]
      },
      {
        "a": "identity",
        "b": "continuity",
        "shared_issues": 3,
        "issues": [
          "Lightning AI",
          "Railway environment secrets",
          "ConnectWise backup identities"
        ]
      },
      {
        "a": "software",
        "b": "ai",
        "shared_issues": 6,
        "issues": [
          "Cairn",
          "LiteLLM 1.107.0",
          "AI-generated code",
          "OVHcloud CLI release assets",
          "Tensorlake npm compromise",
          "GhostAction workflow injection"
        ]
      },
      {
        "a": "software",
        "b": "trust",
        "shared_issues": 2,
        "issues": [
          "eMudhra / Tailscale remediation",
          "Node.js"
        ]
      },
      {
        "a": "software",
        "b": "data",
        "shared_issues": 3,
        "issues": [
          "Cairn",
          "AI-generated code",
          "TeamUpdraft data and site access"
        ]
      },
      {
        "a": "ai",
        "b": "data",
        "shared_issues": 3,
        "issues": [
          "Cairn",
          "AI agent governance",
          "AI-generated code"
        ]
      },
      {
        "a": "ai",
        "b": "continuity",
        "shared_issues": 2,
        "issues": [
          "Lightning AI",
          "Railway environment secrets"
        ]
      },
      {
        "a": "data",
        "b": "continuity",
        "shared_issues": 1,
        "issues": [
          "ConnectWise backup identities"
        ]
      }
    ],
    "normalized_betweenness": {
      "identity": 0.45812,
      "software": 0.26796,
      "ai": 0.19905,
      "trust": 0.01225,
      "data": 0.05521,
      "continuity": 0.07619,
      "r01": 0.0,
      "r02": 0.0,
      "r03": 0.02406,
      "r04": 0.0,
      "r05": 0.01273,
      "r06": 0.01376,
      "r07": 0.00362,
      "r08": 0.04761,
      "r09": 0.0039,
      "r10": 0.02299,
      "r13": 0.00362,
      "r14": 0.04143,
      "r15": 0.01376,
      "r16": 0.04425,
      "r17": 0.04761,
      "r18": 0.0039,
      "r19": 0.02299,
      "r20": 0.00985,
      "r21": 0.02309,
      "r22": 0.04412,
      "r23": 0.02299,
      "r24": 0.00985,
      "r25": 0.02299
    },
    "articulation_nodes": [
      {
        "id": "software",
        "components_after_removal": [
          [
            "ai",
            "continuity",
            "data",
            "identity",
            "r02",
            "r03",
            "r04",
            "r05",
            "r06",
            "r07",
            "r08",
            "r09",
            "r10",
            "r13",
            "r14",
            "r15",
            "r16",
            "r17",
            "r18",
            "r19",
            "r20",
            "r21",
            "r22",
            "r23",
            "r24",
            "r25",
            "trust"
          ],
          [
            "r01"
          ]
        ]
      },
      {
        "id": "ai",
        "components_after_removal": [
          [
            "continuity",
            "data",
            "identity",
            "r01",
            "r02",
            "r03",
            "r05",
            "r06",
            "r07",
            "r08",
            "r09",
            "r10",
            "r13",
            "r14",
            "r15",
            "r16",
            "r17",
            "r18",
            "r19",
            "r20",
            "r21",
            "r22",
            "r23",
            "r24",
            "r25",
            "software",
            "trust"
          ],
          [
            "r04"
          ]
        ]
      },
      {
        "id": "continuity",
        "components_after_removal": [
          [
            "ai",
            "data",
            "identity",
            "r01",
            "r03",
            "r04",
            "r05",
            "r06",
            "r07",
            "r08",
            "r09",
            "r10",
            "r13",
            "r14",
            "r15",
            "r16",
            "r17",
            "r18",
            "r19",
            "r20",
            "r21",
            "r22",
            "r23",
            "r24",
            "r25",
            "software",
            "trust"
          ],
          [
            "r02"
          ]
        ]
      }
    ]
  },
  "sensitivity": {
    "include_iphone_claim": {
      "identity": 17,
      "software": 13,
      "ai": 12,
      "trust": 4,
      "data": 7,
      "continuity": 4
    }
  },
  "documented_cross_issue_links": [
    {
      "a": "r06",
      "b": "r15",
      "relation": "Node.js security releases include eMudhra certificate-trust updates.",
      "source": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases"
    },
    {
      "a": "source_item_06",
      "b": "source_item_26",
      "relation": "Tailscale TS-2026-013 is remediation for the same eMudhra certificate incident; merged into r06.",
      "source": "https://tailscale.com/security-bulletins"
    }
  ],
  "source_topic_count": 26
}