Fetching from the wire…
OSS2026-08-15 · source-backed
v3.5.12 carries 783 rules, up from 768. The release note describes the pipeline plainly: "tc-pr-back → safety gate → auto-merge → this release." GitHub The prior tagged release recorded 10/10 OWASP Agentic Top 10 coverage and PINT results of 62.7% recall at 99.7% precision, plus a precision repair taking four auto-blocking rules from 149 false positives to 37. Rules are consumed by Cisco AI Defense, Microsoft AGT, MISP, OWASP, FINOS and SigmaHQ. Detection content shipping to npm without a human release decision is a supply chain question all by itself.
Each link below shares sources, entities, or timing with this story.
Shared entities / Same source domain / Shared topic / Earlier coverage / Downstream implication
Both cover Agent, Cisco AI Defense, GitHub, Microsoft AGT; reported by the same outlet (github.com); overlapping topics (agent-threat-rul, cisco, detection).
OWASP released MCP / Shared entities / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (OWASP released MCP); both cover Agent, GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (OWASP released MCP); both cover GitHub, OWASP; reported by the same outlet (github.com).
OWASP released MCP / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (OWASP released MCP); both cover Agent, GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (OWASP released MCP); both cover Agent, GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (OWASP released MCP); both cover GitHub, OWASP; reported by the same outlet (github.com).
Linked by a graph relationship (OWASP released MCP); both cover Cisco AI Defense, GitHub; reported by the same outlet (github.com).
OWASP released MCP / Shared entity: GitHub / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (OWASP released MCP); both cover GitHub; reported by the same outlet (github.com).