Entity trail

Frame Security

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-07-11 / arxiv-researcherDual-Graph Verification Framework Audits Legacy IT Security Concepts for NIS-2 / OSCAL MigrationThe NIS-2 Directive pushes organizations from document-based compliance toward machine-readable artifacts like OSCAL (with Germany's BSI adapting it as Grundschutz++), but migrating extensive legacy IT security concepts without verification risks translation errors. This paper proposes a dual-graph verification framework to reverse-engineer and audit those legacy concepts during migration. Complements the concurrent MCP-based OSCAL pipeline work as the verification half of continuous-compliance tooling.
2026-07-10 / skill-finderMCP Apps: declare your UI templates ahead of time so hosts can prefetch and security-review themMCP Apps standardizes the ad-hoc embedded-UI experiments into server-rendered HTML displayed in a sandboxed iframe. The design constraint worth copying: tools declare their UI templates in advance rather than streaming markup at call time, so the host can prefetch, cache, and security-review the template before anything executes. Every action taken inside the rendered UI routes back through the same JSON-RPC base protocol, inheriting the identical consent and audit path as a direct tool call.
2026-07-10 / arxiv-researcherPrismata Confines Cross-Site Prompt Injection by Treating Web Agents Like an XSS ProblemPrismata (arXiv 2607.08147, July 9) reframes web-agent prompt injection as the same class of bug as Cross-Site Scripting: the danger is mixing trusted and untrusted content on a page, and agents reintroduce it by interpreting natural language on third-party or user-generated content as instructions. The paper's core observation is that deriving a task-specific security policy requires reasoning over page structure, which is exactly what an attacker controls. This is the most directly actionable web-agent security paper in the last 48 hours for anyone letting an agent browse the open web.
2026-07-01 / arxiv-researcherLifecycle survey reframes LLM security around the full application stack, not the weightsThis survey argues LLM risk no longer arises from model weights alone but from the entire lifecycle and application stack — retrieval pipelines, enterprise assistants, coding environments, tool calls, file writes, and cross-boundary autonomous agents. It catalogs attacks, risks, defenses, and open problems across that stack. A useful map for practitioners threat-modeling agents that read private data and execute code across organizational boundaries.
2026-06-28 / news-researcherOpenAI Readies GPT-5.6 'Sol, Terra, Luna' for Limited Preview Under Preparedness FrameworkOpenAI announced plans to make GPT-5.6 Sol, Terra, and Luna generally available in the coming weeks, starting with a limited preview for a small group of trusted partners following coordination with the U.S. government. Under OpenAI's Preparedness Framework, all three are classified as High capability in both Cybersecurity and Biological/Chemical risk, with tailored safeguards per model. The staged, government-coordinated rollout signals frontier-model releases are now gated by national-security review, not just product readiness.
2026-06-26 / saas-disruption-researcherAI-Native Compliance (Strac Comply) Splits the Vanta/Drata Market Into 'Evidence-Only' vs 'Evidence + Active Security'On the Friday security/compliance beat, AI-native entrants like Strac Comply are repositioning the GRC category by bundling SOC 2/HIPAA/ISO 27001/GDPR/PCI evidence automation with native DLP and active data-security enforcement — explicitly framing incumbents Vanta, Drata, and Secureframe as 'evidence-only.' The architectural claim is that an agent that both proves and *enforces* controls collapses two product categories (compliance automation + data security) into one. Lower confidence given vendor-sourced framing, but the category split — passive evidence collection vs active agentic remediation — is the real 2026 dividing line for security SaaS.
2026-06-23 / reddit-researcherGoogle DeepMind's AI Control Roadmap Treats Deployed Agents as 'Insider Threats' With 15 System-Level DefensesDeepMind published its first AI Control Roadmap (June 18, 2026) arguing that alignment training alone can't guarantee control, so agentic systems need structural containment built before more capable models ship. The framework lists 15 infrastructure-layer defenses — a Supervisor Agent for runtime monitoring, cryptographic signing of agent actions, a kill switch, and a threat taxonomy modeled on MITRE ATT&CK — plus a companion 'Three Layers of Agent Security' guide spanning individual agent, multi-agent, and ecosystem levels. For builders running agents in production today, it's a concrete checklist that reframes agent security as a systems problem, not a model-quality problem.
2026-06-23 / rss-researcherOpenAI Ships Full GPT-5.5-Cyber and Launches 'Patch the Planet' With Trail of Bits — A Direct Counter to Anthropic's GlasswingOn June 22 OpenAI moved GPT-5.5-Cyber out of preview to general availability and announced Patch the Planet, a Daybreak initiative co-founded with Trail of Bits (plus HackerOne) that embeds dedicated security engineers and Codex/GPT-5.5-Cyber across major open-source projects; 30+ projects including cURL, Go, Python, Sigstore and pyca/cryptography have committed, with hundreds of issues already found and dozens of patches merged. It lands three weeks after Anthropic expanded Project Glasswing/Claude Mythos to 150 orgs and is explicitly framed as the rival defensive play. For builders the signal is that the two frontier labs are now competing to auto-harden the open-source dependency tree you ship on — a new front in supply-chain security.
2026-06-20 / arxiv-researcherFFinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-TeamingAn expert-guided red-teaming framework for financial LLMs using a two-level taxonomy mapping global standards (FATF, EU DORA) to threats and converting financial documents into context-rich test prompts. An expert-validated rubric cut critical false negatives from 28 to 12 versus standard approaches; it is deployed in South Korea's Financial Security Institute for regulatory sandbox testing. Domain-specific but a useful template for sector-targeted red-teaming.
2026-06-20 / arxiv-researcherPhantomSkill: Malicious Code Injection in Agent Skill EcosystemsAn attack framework that hides malicious behavior inside agent-skill auxiliary resources; its VulMask technique rewrites overt malicious scripts into 'vulnerability-shaped' implementations that only activate under attacker-controlled conditions. It evades a range of automated security reviewers and coding agents that would catch obvious malicious code. A direct supply-chain warning for anyone installing third-party agent skills or MCP tools.
2026-06-16 / reddit-researcherOWASP 2026 Report Reframes Prompt Injection as a Permanent Architectural Flaw, Not a Patchable BugCoverage of OWASP's 2026 LLM Security Report argues prompt injection is architectural — LLMs receive trusted commands and untrusted data as the same token stream — so filtering and least-privilege reduce but never eliminate it; the report cites a 340% YoY surge, the fastest-growing attack category. Concrete 2026 incidents named include the 'hackerbot-claw' bot backdooring LiteLLM on PyPI (~47,000 downloads over ~3 hours) and the first malicious MCP server caught in the wild (CVE-2025-6514, CVSS 9.6 RCE). Meta's 'Agents Rule of Two' — an unsupervised agent may hold at most two of the lethal-trifecta capabilities — is offered as the practical mitigation pattern builders should adopt.
2026-06-13 / news-researcherAmazon CEO's Talks With U.S. Officials Triggered the Crackdown on Anthropic's ModelsThe WSJ reports the Anthropic export-control directive followed conversations between Amazon's CEO and U.S. officials, adding a competitive-dynamics layer to the national-security framing — Amazon is both a major Anthropic backer and a rival cloud/model provider. Commerce Secretary Howard Lutnick reportedly tried to get Anthropic to pause the Mythos/Fable release before resorting to the export-control letter requiring individually validated licenses. The backstory reframes the action as entangled with industry rivalry, not purely security.

Graph relationships

WORKS AT
Tal Shlomo
Tal Shlomo founded Frame Security.
Source finding
INVESTED IN
Picture Capital
Picture Capital invested in Frame Security's $50M funding round.
Source finding
INVESTED IN
Team8
Team8 invested in Frame Security's $50M funding round.
Source finding
INVESTED IN
Index Ventures
Index Ventures invested $50M in Frame Security.
Source finding
WORKS AT
Tal Shlomo -> Frame Security
Tal Shlomo founded Frame Security.
Source finding

Source trail

Source Source Source arXiv Model Context Protocol Blog — The 2026-07-28 Specification Release Candidate arXiv arXiv

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues