{"sources":[{"id":"editorial","name":"Editorial Evidence Review","url":null,"feedUrl":null,"category":"editorial","status":"editorial","lastAttemptAt":null,"lastSuccessAt":null,"lastError":null,"recordCount":19,"scope":"Selective historical baseline reviewed on 2026-10-26, not complete or live worldwide monitoring. Dates describe cited disclosures, not necessarily incident occurrence. Known exploitation does not establish continuing attacks today, zero-day use, or attacker AI use. This sample is not a denominator for global or AI incident trends.","limitations":"A manually reviewed, dated editorial sample, not a live feed. Source claims and dates remain tied to each record; no invented scores or trends.","updateCadenceMinutes":null},{"id":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","feedUrl":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","category":"catalog","status":"live","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:50:55.739Z","lastError":null,"recordCount":1756,"scope":"The full successfully validated KEV catalog, without a newest-record slice.","limitations":"Known exploitation is not necessarily a zero-day. KEV-only publication dates denote catalog additions, not initial disclosure. Due dates concern covered US federal agencies, not your SLA. The last complete catalog is retained for 30 days; oversized or incomplete replacements are rejected, not truncated.","updateCadenceMinutes":5,"freshnessWindowMinutes":15,"retentionDays":30,"maxRetainedRecords":25000,"optional":false,"partial":false,"processedCount":1756,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"catalogRecords":1756,"fullCatalog":true,"eligibleIncomingRecords":1756}},{"id":"github-advisories","name":"GitHub Public Security Advisories","url":"https://github.com/advisories","feedUrl":"https://api.github.com/advisories?type=reviewed&per_page=100&sort=updated&direction=desc","category":"advisories","status":"cached","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:40:59.678Z","lastError":"Public source returned an error. (HTTP 403)","recordCount":308,"scope":"GitHub-reviewed public advisories, sorted by update date; at most 3 cursor pages of 100 records per cycle, without authentication.","limitations":"Not the entire advisory database. GitHub review is upstream review, not local editorial review or proof of remediation. Withdrawn advisories are excluded. Retained union is bounded to 2,000 records updated within 180 days; public API rate limits can reduce coverage.","updateCadenceMinutes":5,"freshnessWindowMinutes":15,"retentionDays":180,"maxRetainedRecords":2000,"optional":false,"partial":true,"processedCount":0,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"pagesFetched":3,"maxPages":3,"pageSize":100,"furtherPagesNotRequested":true,"eligibleIncomingRecords":283}},{"id":"jpcert","name":"JPCERT/CC Japan Advisories","url":"https://www.jpcert.or.jp/","feedUrl":"https://www.jpcert.or.jp/rss/jpcert.rdf","category":"advisories","status":"live","lastAttemptAt":"2026-10-26T18:40:55.462Z","lastSuccessAt":"2026-10-26T18:40:55.873Z","lastError":null,"recordCount":32,"scope":"Current Japanese-language alerts and weekly report entries, with the exact article or weekly-report anchor.","limitations":"RSS usually supplies only a Japanese title and date. Titles matching JPCERT/CC's fixed patterns are shown in English via a deterministic glossary translation with the original Japanese retained; unmatched titles stay in Japanese rather than being guessed. No affected-version detail is invented. Japan denotes this advisory audience, not a scan or proof of exposure. Up to 500 records are retained for 365 days.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":365,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":32,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":30,"excludedByTopic":0,"eligibleIncomingRecords":32}},{"id":"project-zero","name":"Google Project Zero Research","url":"https://projectzero.google/","feedUrl":"https://projectzero.google/feed.xml","category":"research","status":"live","lastAttemptAt":"2026-10-26T18:35:55.322Z","lastSuccessAt":"2026-10-26T18:35:57.768Z","lastError":null,"recordCount":10,"scope":"Security-research entries in the official Atom feed, including explicit AI-defense research when present; no archive crawling.","limitations":"The official feed is large but contains a bounded current entry list. Excerpts are not full articles. Ordinary fuzzing, automation, and exploit research are not classified as AI. Up to 250 records are retained for 730 days.","updateCadenceMinutes":60,"freshnessWindowMinutes":120,"retentionDays":730,"maxRetainedRecords":250,"optional":false,"partial":false,"processedCount":10,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":10,"excludedByTopic":0,"eligibleIncomingRecords":10}},{"id":"google-security","name":"Google Security Research","url":"https://security.googleblog.com/","feedUrl":"https://security.googleblog.com/feeds/posts/default?alt=rss&redirect=false&max-results=50","category":"research","status":"live","lastAttemptAt":"2026-10-26T18:35:55.322Z","lastSuccessAt":"2026-10-26T18:35:57.804Z","lastError":null,"recordCount":47,"scope":"At most the 50 entries supplied by the official Google Security RSS endpoint; security-topic filtering and conservative, source-linked AI classifications.","limitations":"Not all Google research or all AI defense. Product security and prompt-injection research do not establish attacker AI use. Excerpts are not independently reproduced findings. Up to 250 records are retained for 730 days.","updateCadenceMinutes":60,"freshnessWindowMinutes":120,"retentionDays":730,"maxRetainedRecords":250,"optional":false,"partial":false,"processedCount":50,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":50,"excludedByTopic":0,"eligibleIncomingRecords":47}},{"id":"nvd-recent","name":"NVD Recently Published CVEs","url":"https://nvd.nist.gov/vuln/search","feedUrl":"https://services.nvd.nist.gov/rest/json/cves/2.0","category":"catalog","status":"live","lastAttemptAt":"2026-10-26T18:20:57.477Z","lastSuccessAt":"2026-10-26T18:21:53.012Z","lastError":null,"recordCount":5738,"scope":"Every CVE in the NVD, from any vendor worldwide, that any scorer (the vendor/CNA, NVD, or CISA) rates HIGH or CRITICAL, or that CISA's assessment reports as actively exploited. A 14-day backfill on first run, then every CVE modified since the last successful retrieval.","limitations":"Medium and low severity CVEs are not ingested; unscored CVEs appear once scored. The CNA (vendor) score is preferred over NVD's own when both exist. NVD publication is not evidence of exploitation. Up to 6,000 records are retained for 120 days.","updateCadenceMinutes":30,"freshnessWindowMinutes":60,"retentionDays":120,"maxRetainedRecords":6000,"optional":false,"partial":false,"processedCount":542,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"mode":"modified-since-last-success","windowStart":"2026-10-26T16:51:02.326Z","cvesInWindow":958,"pages":2,"keptHighOrCritical":542,"skippedBelowHighOrUnscored":416,"skippedWithdrawnByNvd":0,"eligibleIncomingRecords":542}},{"id":"breach-reporting","name":"BleepingComputer Security Reporting","url":"https://www.bleepingcomputer.com/","feedUrl":"https://www.bleepingcomputer.com/feed/","category":"reporting","status":"unavailable","lastAttemptAt":"2026-10-26T17:55:56.219Z","lastSuccessAt":null,"lastError":"Public source returned an error. (HTTP 403)","recordCount":0,"scope":"Breach, vulnerability, and exploitation reporting selected from the current syndication feed, with exact article links.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days.","updateCadenceMinutes":5,"freshnessWindowMinutes":15,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":true,"processedCount":0,"rejectedCount":0,"nextRetryAt":"2026-10-26T19:55:57.312Z","cacheError":null,"coverage":{}},{"id":"thehackernews","name":"The Hacker News","url":"https://thehackernews.com/","feedUrl":"https://feeds.feedburner.com/TheHackersNews","category":"reporting","status":"live","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:50:55.718Z","lastError":null,"recordCount":30,"scope":"Breach, vulnerability, and exploitation reporting selected from the current syndication feed, with exact article links.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days.","updateCadenceMinutes":5,"freshnessWindowMinutes":15,"retentionDays":90,"maxRetainedRecords":1000,"optional":false,"partial":false,"processedCount":30,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":50,"excludedByTopic":21,"eligibleIncomingRecords":28}},{"id":"securityweek","name":"SecurityWeek","url":"https://www.securityweek.com/","feedUrl":"https://www.securityweek.com/feed/","category":"reporting","status":"live","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:50:55.667Z","lastError":null,"recordCount":6,"scope":"Breach, vulnerability, and exploitation reporting selected from the current syndication feed, with exact article links.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":4,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":10,"excludedByTopic":6,"eligibleIncomingRecords":4}},{"id":"helpnetsecurity","name":"Help Net Security","url":"https://www.helpnetsecurity.com/","feedUrl":"https://www.helpnetsecurity.com/feed/","category":"reporting","status":"live","lastAttemptAt":"2026-10-26T18:45:56.766Z","lastSuccessAt":"2026-10-26T18:45:58.962Z","lastError":null,"recordCount":1,"scope":"Breach, vulnerability, and exploitation reporting selected from the current syndication feed, with exact article links.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":1,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":10,"excludedByTopic":9,"eligibleIncomingRecords":1}},{"id":"therecord","name":"The Record (Recorded Future News)","url":"https://therecord.media/","feedUrl":"https://therecord.media/feed","category":"reporting","status":"cached","lastAttemptAt":"2026-10-26T16:50:55.493Z","lastSuccessAt":"2026-10-26T14:15:57.066Z","lastError":"Syndication returned no eligible validated records; HTTP success was not ingestion success.","recordCount":1,"scope":"Breach, vulnerability, and exploitation reporting selected from the current syndication feed, with exact article links.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":true,"processedCount":0,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":5,"excludedByTopic":4,"eligibleIncomingRecords":1}},{"id":"axios","name":"Axios","url":"https://www.axios.com/","feedUrl":"https://api.axios.com/feed/","category":"news","status":"live","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:50:55.667Z","lastError":null,"recordCount":3,"scope":"General technology and business news, filtered to security stories and incidents involving AI systems; everything else in the feed is skipped.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days. An AI role (acted on its own, used by attackers, flawed or attacked) is assigned only when the headline or excerpt says so.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":3,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":100,"excludedByTopic":97,"eligibleIncomingRecords":3}},{"id":"techcrunch","name":"TechCrunch Security","url":"https://techcrunch.com/category/security/","feedUrl":"https://techcrunch.com/category/security/feed/","category":"news","status":"live","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:50:55.649Z","lastError":null,"recordCount":3,"scope":"General technology and business news, filtered to security stories and incidents involving AI systems; everything else in the feed is skipped.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days. An AI role (acted on its own, used by attackers, flawed or attacked) is assigned only when the headline or excerpt says so.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":3,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":20,"excludedByTopic":17,"eligibleIncomingRecords":3}},{"id":"wired","name":"WIRED Security","url":"https://www.wired.com/category/security/","feedUrl":"https://www.wired.com/feed/category/security/latest/rss","category":"news","status":"live","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:50:55.667Z","lastError":null,"recordCount":5,"scope":"General technology and business news, filtered to security stories and incidents involving AI systems; everything else in the feed is skipped.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days. An AI role (acted on its own, used by attackers, flawed or attacked) is assigned only when the headline or excerpt says so.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":5,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":20,"excludedByTopic":15,"eligibleIncomingRecords":5}},{"id":"theverge","name":"The Verge (AI)","url":"https://www.theverge.com/ai-artificial-intelligence","feedUrl":"https://www.theverge.com/rss/ai-artificial-intelligence/index.xml","category":"news","status":"live","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:50:55.667Z","lastError":null,"recordCount":0,"scope":"General technology and business news, filtered to security stories and incidents involving AI systems; everything else in the feed is skipped.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days. An AI role (acted on its own, used by attackers, flawed or attacked) is assigned only when the headline or excerpt says so.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":0,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":10,"excludedByTopic":10,"eligibleIncomingRecords":0}},{"id":"media404","name":"404 Media","url":"https://www.404media.co/","feedUrl":"https://www.404media.co/rss/","category":"news","status":"live","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:50:55.718Z","lastError":null,"recordCount":0,"scope":"General technology and business news, filtered to security stories and incidents involving AI systems; everything else in the feed is skipped.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days. An AI role (acted on its own, used by attackers, flawed or attacked) is assigned only when the headline or excerpt says so.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":0,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":15,"excludedByTopic":15,"eligibleIncomingRecords":0}},{"id":"hibp","name":"Have I Been Pwned","url":"https://haveibeenpwned.com/PwnedWebsites","feedUrl":"https://haveibeenpwned.com/api/v3/breaches","category":"catalog","status":"live","lastAttemptAt":"2026-10-26T18:25:55.448Z","lastSuccessAt":"2026-10-26T18:25:57.041Z","lastError":null,"recordCount":121,"scope":"Breaches loaded into Have I Been Pwned in the last year: breached organization, account count, exposed data types, breach and load dates, and the organization's disclosure when HIBP links one.","limitations":"HIBP covers breaches whose data it obtained and loaded; many breaches never appear there. Counts are accounts in the loaded data, not necessarily people. Unverified breaches are labeled as such; fabricated, spam-list, retired, and sensitive breaches are skipped. Up to 400 records are retained for 365 days.","updateCadenceMinutes":60,"freshnessWindowMinutes":120,"retentionDays":365,"maxRetainedRecords":400,"optional":false,"partial":false,"processedCount":121,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"breachesInWindow":121,"skippedFabricatedSpamRetiredOrSensitive":926,"eligibleIncomingRecords":121}},{"id":"databreaches","name":"DataBreaches.net","url":"https://databreaches.net/","feedUrl":"https://databreaches.net/feed/","category":"reporting","status":"live","lastAttemptAt":"2026-10-26T18:40:55.462Z","lastSuccessAt":"2026-10-26T18:40:55.873Z","lastError":null,"recordCount":5,"scope":"Breach and incident reporting selected from the current syndication feed, with exact article links.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":5,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":10,"excludedByTopic":5,"eligibleIncomingRecords":5}},{"id":"hipaajournal","name":"The HIPAA Journal","url":"https://www.hipaajournal.com/","feedUrl":"https://www.hipaajournal.com/feed/","category":"reporting","status":"live","lastAttemptAt":"2026-10-26T18:25:55.448Z","lastSuccessAt":"2026-10-26T18:25:57.095Z","lastError":null,"recordCount":7,"scope":"Healthcare breach and security reporting selected from the current feed; compliance guides and opinion are skipped.","limitations":"Reporting, not independently primary-confirmed or locally reviewed. A record is marked as known exploitation only when the headline or excerpt explicitly reports exploitation. Headline filtering is not a complete census. No fabricated scores, losses, CVEs, or AI attribution. Retained for 90 days.","updateCadenceMinutes":30,"freshnessWindowMinutes":60,"retentionDays":90,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":7,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":10,"excludedByTopic":3,"eligibleIncomingRecords":7}},{"id":"anthropic","name":"Anthropic","url":"https://www.anthropic.com/news","feedUrl":"https://www.anthropic.com/sitemap.xml","category":"ai-company","status":"live","lastAttemptAt":"2026-10-26T18:25:55.448Z","lastSuccessAt":"2026-10-26T18:25:59.739Z","lastError":null,"recordCount":1,"scope":"Anthropic news posts about misuse, threats, safety, and security, found through its sitemap (it publishes no feed); at most 8 new pages are read per run.","limitations":"The company's own disclosure about its systems or threats it observed: authoritative for what the company says, not independent verification. Only posts about misuse, threats, safety, or security are kept. Retained for 730 days.","updateCadenceMinutes":60,"freshnessWindowMinutes":120,"retentionDays":730,"maxRetainedRecords":200,"optional":false,"partial":false,"processedCount":1,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"topicalPostsListed":8,"pagesReadThisRun":8,"excludedByTopic":7,"maxPagesPerRun":8,"eligibleIncomingRecords":1}},{"id":"openai","name":"OpenAI","url":"https://openai.com/news/","feedUrl":"https://openai.com/news/rss.xml","category":"ai-company","status":"live","lastAttemptAt":"2026-10-26T18:25:55.448Z","lastSuccessAt":"2026-10-26T18:25:55.704Z","lastError":null,"recordCount":61,"scope":"OpenAI news posts about misuse, threats, safety, and security; product and business posts are skipped.","limitations":"The company's own disclosure about its systems or threats it observed: authoritative for what the company says, not independent verification. Only posts about misuse, threats, safety, or security are kept. Retained for 730 days.","updateCadenceMinutes":30,"freshnessWindowMinutes":60,"retentionDays":730,"maxRetainedRecords":200,"optional":false,"partial":false,"processedCount":85,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":1320,"excludedByTopic":1235,"eligibleIncomingRecords":61}},{"id":"deepmind","name":"Google DeepMind","url":"https://deepmind.google/blog/","feedUrl":"https://deepmind.google/blog/rss.xml","category":"ai-company","status":"live","lastAttemptAt":"2026-10-26T18:25:55.448Z","lastSuccessAt":"2026-10-26T18:25:55.704Z","lastError":null,"recordCount":1,"scope":"Google DeepMind blog posts about misuse, threats, safety, and security; product and research-only posts are skipped.","limitations":"The company's own disclosure about its systems or threats it observed: authoritative for what the company says, not independent verification. Only posts about misuse, threats, safety, or security are kept. Retained for 730 days.","updateCadenceMinutes":60,"freshnessWindowMinutes":120,"retentionDays":730,"maxRetainedRecords":200,"optional":false,"partial":false,"processedCount":1,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":100,"excludedByTopic":99,"eligibleIncomingRecords":1}},{"id":"microsoft-security","name":"Microsoft Security blog","url":"https://www.microsoft.com/en-us/security/blog/","feedUrl":"https://www.microsoft.com/en-us/security/blog/feed/","category":"ai-company","status":"live","lastAttemptAt":"2026-10-26T18:50:55.505Z","lastSuccessAt":"2026-10-26T18:50:59.031Z","lastError":"1 malformed upstream records were excluded.","recordCount":4,"scope":"Microsoft Threat Intelligence and security posts: vulnerabilities, threat actors, and AI misuse it observed.","limitations":"The publishing company's own reporting about threats it observed; not independently confirmed here. Marketing posts are skipped. Up to 300 records are retained for 365 days.","updateCadenceMinutes":30,"freshnessWindowMinutes":60,"retentionDays":365,"maxRetainedRecords":300,"optional":false,"partial":true,"processedCount":4,"rejectedCount":1,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":10,"excludedByTopic":5,"eligibleIncomingRecords":4}},{"id":"aiid","name":"AI Incident Database","url":"https://incidentdatabase.ai/","feedUrl":"https://incidentdatabase.ai/rss.xml","category":"ai-incidents","status":"live","lastAttemptAt":"2026-10-26T18:45:56.766Z","lastSuccessAt":"2026-10-26T18:46:59.993Z","lastError":null,"recordCount":49,"scope":"Reports newly added to the AI Incident Database (Responsible AI Collaborative) that concern security or misuse (deepfakes, scams, influence operations, attacks on or by AI, unauthorized actions), each linking to the original report on its publisher's site. Vehicle crashes, lawsuits, bias, errors, and other non-security harms are skipped; non-English reports usually are too, because the filter reads English.","limitations":"Inclusion in the database means an editor judged it an AI incident; it is not an independent investigation. The linked report is the evidence. An AI role is assigned only when the report title states it. Up to 500 records are retained for 365 days.","updateCadenceMinutes":60,"freshnessWindowMinutes":120,"retentionDays":365,"maxRetainedRecords":500,"optional":false,"partial":false,"processedCount":49,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"feedEntries":100,"excludedByTopic":51,"eligibleIncomingRecords":49}},{"id":"first-epss","name":"FIRST EPSS","url":"https://www.first.org/epss/","feedUrl":"https://api.first.org/data/v1/epss","category":"enrichment","status":"live","lastAttemptAt":"2026-10-26T13:40:05.166Z","lastSuccessAt":"2026-10-26T13:40:30.430Z","lastError":null,"recordCount":6700,"scope":"Measured EPSS rows for real CVE identifiers already in this corpus; batches of at most 80 identifiers and under 1,900 CVE-query characters.","limitations":"Daily model scores estimate exploitation in the following 30 days, not organizational exposure. Missing CVEs receive no default score. Exact scoring dates and per-CVE/date API evidence are retained for 30 days; scores older than 2 days are stale even if a retrieval succeeds.","updateCadenceMinutes":360,"freshnessWindowMinutes":720,"retentionDays":30,"maxRetainedRecords":30000,"optional":false,"partial":false,"processedCount":6700,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"queriedCves":6798,"validatedScores":6700,"batches":85,"completedBatches":85,"unscoredCves":98,"eligibleIncomingRecords":6700},"scoresAsOf":"2026-10-25","oldestScoreDate":"2026-10-25","staleScoreCount":0,"scoreFreshnessDays":2},{"id":"cve-cna","name":"CVE Program CVSS Enrichment","url":"https://www.cve.org/","feedUrl":"https://cveawg.mitre.org/api/cve/","category":"enrichment","status":"live","lastAttemptAt":"2026-10-26T18:41:00.745Z","lastSuccessAt":"2026-10-26T18:41:03.388Z","lastError":"1 targeted CNA requests failed. Public source returned an error. (HTTP 404)","recordCount":140,"scope":"At most 8 published per-CVE documents per cycle, one request at a time, for missing CVSS or an editorial CVE-API measurement not yet rechecked; no NVD polling.","limitations":"Targeted enrichment, not full CVE coverage. CNA CVSS is preferred; if absent, an explicitly labeled public ADP assessment can supply the actual metric and authoritative source update date. A document with no usable CVSS is not a metric-ingestion success. Unscored targets are deferred for 24 hours. Up to 4,000 enrichments are retained for 30 days.","updateCadenceMinutes":15,"freshnessWindowMinutes":30,"retentionDays":30,"maxRetainedRecords":4000,"optional":true,"partial":true,"processedCount":7,"rejectedCount":0,"nextRetryAt":null,"cacheError":null,"coverage":{"targetedCves":8,"documentsChecked":7,"validatedCvss":7,"maxRequestsPerCycle":8,"eligibleIncomingRecords":7}}],"generatedAt":"2026-10-26T18:55:32.175Z"}