https://riskatlas.principle.sg/ https://riskatlas.principle.sg/systems https://riskatlas.principle.sg/systems/chatbot https://riskatlas.principle.sg/systems/rag https://riskatlas.principle.sg/systems/agent https://riskatlas.principle.sg/systems/computer-use-agent https://riskatlas.principle.sg/systems/multi-agent https://riskatlas.principle.sg/systems/internals https://riskatlas.principle.sg/systems/legal-workflow https://riskatlas.principle.sg/systems/model-supply-chain https://riskatlas.principle.sg/systems/training-pipeline https://riskatlas.principle.sg/systems/rlhf-feedback-loop https://riskatlas.principle.sg/systems/text-to-image-diffusion https://riskatlas.principle.sg/systems/conditioned-image-edit https://riskatlas.principle.sg/systems/identity-deepfake https://riskatlas.principle.sg/systems/tts-voice-cloning https://riskatlas.principle.sg/systems/asr-diarization-pipeline https://riskatlas.principle.sg/systems/diffusion-video-generation https://riskatlas.principle.sg/systems/abliteration-pipeline https://riskatlas.principle.sg/scenarios https://riskatlas.principle.sg/scenarios/scn-abliteration https://riskatlas.principle.sg/scenarios/scn-agentic-misalignment https://riskatlas.principle.sg/scenarios/scn-agentjacking https://riskatlas.principle.sg/scenarios/scn-backdoor https://riskatlas.principle.sg/scenarios/scn-cascading-errors https://riskatlas.principle.sg/scenarios/scn-confused-deputy https://riskatlas.principle.sg/scenarios/scn-crescendo-jailbreak https://riskatlas.principle.sg/scenarios/scn-cua-visual-injection https://riskatlas.principle.sg/scenarios/scn-data-exfil https://riskatlas.principle.sg/scenarios/scn-denial-of-wallet https://riskatlas.principle.sg/scenarios/scn-excessive-agency https://riskatlas.principle.sg/scenarios/scn-hallucination https://riskatlas.principle.sg/scenarios/scn-image-scaling-injection https://riskatlas.principle.sg/scenarios/scn-indirect-injection https://riskatlas.principle.sg/scenarios/scn-kv-cache https://riskatlas.principle.sg/scenarios/scn-memory-poisoning https://riskatlas.principle.sg/scenarios/scn-poetry-jailbreak https://riskatlas.principle.sg/scenarios/scn-rag-poisoning https://riskatlas.principle.sg/scenarios/scn-activation-steering https://riskatlas.principle.sg/scenarios/scn-agent-provisioning-poisoning https://riskatlas.principle.sg/scenarios/scn-approval-bypass https://riskatlas.principle.sg/scenarios/scn-constrained-decoding-jailbreak https://riskatlas.principle.sg/scenarios/scn-embedding-collision https://riskatlas.principle.sg/scenarios/scn-guard-poisoning https://riskatlas.principle.sg/scenarios/scn-identity-theft https://riskatlas.principle.sg/scenarios/scn-kv-state-splice https://riskatlas.principle.sg/scenarios/scn-log-tampering https://riskatlas.principle.sg/scenarios/scn-model-theft https://riskatlas.principle.sg/scenarios/scn-monitor-subversion https://riskatlas.principle.sg/scenarios/scn-rogue-agent https://riskatlas.principle.sg/scenarios/scn-task-decomposition https://riskatlas.principle.sg/scenarios/scn-tokenizer-bypass https://riskatlas.principle.sg/scenarios/scn-tool-poisoning https://riskatlas.principle.sg/scenarios/scn-unsafe-execution https://riskatlas.principle.sg/cases https://riskatlas.principle.sg/cases/bing-sydney-prompt-leak https://riskatlas.principle.sg/cases/grandma-exploit https://riskatlas.principle.sg/cases/echoleak-copilot https://riskatlas.principle.sg/cases/greshake-indirect-injection https://riskatlas.principle.sg/cases/agent-browse-exfil-demos https://riskatlas.principle.sg/cases/gcg-adversarial-suffixes https://riskatlas.principle.sg/cases/many-shot-jailbreaking https://riskatlas.principle.sg/cases/air-canada-chatbot https://riskatlas.principle.sg/cases/mata-v-avianca https://riskatlas.principle.sg/cases/chatgpt-behavior-drift https://riskatlas.principle.sg/cases/poisongpt https://riskatlas.principle.sg/cases/split-view-dataset-poisoning https://riskatlas.principle.sg/cases/samsung-chatgpt-leak https://riskatlas.principle.sg/cases/chatgpt-memory-exfil https://riskatlas.principle.sg/cases/replit-agent-db-deletion https://riskatlas.principle.sg/cases/postmark-mcp-backdoor https://riskatlas.principle.sg/cases/invariant-mcp-tool-poisoning https://riskatlas.principle.sg/cases/huggingface-pickle-rce https://riskatlas.principle.sg/cases/anthropic-agentic-misalignment https://riskatlas.principle.sg/cases/ms-agentic-failure-taxonomy https://riskatlas.principle.sg/cases/denial-of-wallet https://riskatlas.principle.sg/cases/abliteration-single-direction https://riskatlas.principle.sg/cases/sleeper-agents https://riskatlas.principle.sg/cases/prefix-cache-side-channel https://riskatlas.principle.sg/cases/steering-vectors-repe https://riskatlas.principle.sg/cases/gtg-1002-ai-orchestrated-espionage https://riskatlas.principle.sg/cases/near-constant-poison-samples https://riskatlas.principle.sg/cases/forcedleak-agentforce https://riskatlas.principle.sg/cases/servicenow-now-assist-agent-discovery https://riskatlas.principle.sg/cases/shadowleak-deep-research https://riskatlas.principle.sg/cases/idesaster-ai-ide-vulns https://riskatlas.principle.sg/cases/copilot-yolo-mode-rce https://riskatlas.principle.sg/cases/model-namespace-reuse https://riskatlas.principle.sg/cases/slopsquatting-package-hallucination https://riskatlas.principle.sg/cases/character-ai-teen-suicide-settlement https://riskatlas.principle.sg/cases/a2a-agent-in-the-middle https://riskatlas.principle.sg/cases/a2a-agent-session-smuggling https://riskatlas.principle.sg/cases/mcp-registry-marketplace-poisoning https://riskatlas.principle.sg/cases/clawhavoc-clawhub-skill-poisoning https://riskatlas.principle.sg/cases/malice-in-agentland-backdoors https://riskatlas.principle.sg/cases/pleak-prompt-leaking-attack https://riskatlas.principle.sg/cases/system-prompt-leak-repositories https://riskatlas.principle.sg/cases/deepseek-system-prompt-jailbreak https://riskatlas.principle.sg/cases/morris-ii-ai-worm https://riskatlas.principle.sg/cases/safe-in-isolation-decomposition-jailbreak https://riskatlas.principle.sg/cases/replika-garante-ban-fine https://riskatlas.principle.sg/cases/chail-replika-windsor-crossbow https://riskatlas.principle.sg/cases/chai-eliza-belgian-suicide https://riskatlas.principle.sg/cases/gpt4o-sycophancy-rollback https://riskatlas.principle.sg/cases/sycophancy-rlhf-sharma https://riskatlas.principle.sg/cases/arup-deepfake-cfo-video-call https://riskatlas.principle.sg/cases/hk-deepfake-romance-investment-ring https://riskatlas.principle.sg/cases/deepfake-elon-musk-investment-scams https://riskatlas.principle.sg/cases/deepfake-tv-doctors-health-scams https://riskatlas.principle.sg/cases/uk-energy-ceo-voice-fraud https://riskatlas.principle.sg/cases/uae-bank-voice-clone-heist https://riskatlas.principle.sg/cases/ftc-voice-clone-family-emergency-advisory https://riskatlas.principle.sg/cases/taylor-swift-deepfake-nudes-x https://riskatlas.principle.sg/cases/telegram-nudify-bot-ecosystem https://riskatlas.principle.sg/cases/iwf-ai-csam-surge https://riskatlas.principle.sg/cases/school-teen-ai-ncii-deepfakes https://riskatlas.principle.sg/cases/watermarks-in-the-sand-2023 https://riskatlas.principle.sg/cases/unmarker-universal-image-watermark-attack-2025 https://riskatlas.principle.sg/cases/heretic-automated-abliteration https://riskatlas.principle.sg/cases/salesloft-drift-oauth-supply-chain https://riskatlas.principle.sg/cases/amazon-q-wiper-supply-chain https://riskatlas.principle.sg/cases/nvidia-triton-rce-chain https://riskatlas.principle.sg/cases/sesameop-openai-assistants-api-c2 https://riskatlas.principle.sg/cases/anamorpher-image-scaling-injection https://riskatlas.principle.sg/cases/big-sleep-sqlite-cve-2025-6965 https://riskatlas.principle.sg/cases/raine-openai-chatgpt-suicide-suit https://riskatlas.principle.sg/cases/grok-mechahitler-config-regression https://riskatlas.principle.sg/cases/attacker-moves-second-adaptive-attacks https://riskatlas.principle.sg/cases/mcptox-tool-poisoning-benchmark https://riskatlas.principle.sg/cases/operation-bizarre-bazaar-llmjacking https://riskatlas.principle.sg/cases/teampcp-litellm-pypi-gateway-compromise https://riskatlas.principle.sg/cases/adversarial-poetry-jailbreak https://riskatlas.principle.sg/cases/langflow-cve-2026-21445-auth-bypass https://riskatlas.principle.sg/cases/agentjacking-sentry-mcp https://riskatlas.principle.sg/cases/jetbrains-marketplace-ai-keystealer-plugins https://riskatlas.principle.sg/cases/searchleak-copilot https://riskatlas.principle.sg/cases/chatgphish-summary-phishing https://riskatlas.principle.sg/cases/codexui-android-npm-token-theft https://riskatlas.principle.sg/cases/meta-ai-support-bot-instagram-takeover https://riskatlas.principle.sg/cases/lerobot-grpc-pickle-rce https://riskatlas.principle.sg/cases/unsw-capture-the-narrative-wargame https://riskatlas.principle.sg/cases/flowise-custommcp-rce-cve-2025-59528 https://riskatlas.principle.sg/cases/pytorch-lightning-shai-hulud-pypi https://riskatlas.principle.sg/cases/anthropic-glasswing-mythos-vuln-discovery https://riskatlas.principle.sg/cases/gambit-mexico-gov-ai-breach https://riskatlas.principle.sg/cases/openclaw-agent-defames-matplotlib-maintainer https://riskatlas.principle.sg/taxonomy https://riskatlas.principle.sg/taxonomy/r/1 https://riskatlas.principle.sg/taxonomy/r/2 https://riskatlas.principle.sg/taxonomy/r/3 https://riskatlas.principle.sg/taxonomy/r/4 https://riskatlas.principle.sg/taxonomy/r/5 https://riskatlas.principle.sg/taxonomy/r/6 https://riskatlas.principle.sg/taxonomy/r/7 https://riskatlas.principle.sg/taxonomy/r/8 https://riskatlas.principle.sg/taxonomy/r/9 https://riskatlas.principle.sg/taxonomy/r/10 https://riskatlas.principle.sg/taxonomy/r/11 https://riskatlas.principle.sg/taxonomy/r/12 https://riskatlas.principle.sg/taxonomy/r/13 https://riskatlas.principle.sg/taxonomy/r/14 https://riskatlas.principle.sg/taxonomy/r/15 https://riskatlas.principle.sg/taxonomy/r/16 https://riskatlas.principle.sg/taxonomy/r/17 https://riskatlas.principle.sg/taxonomy/r/18 https://riskatlas.principle.sg/taxonomy/r/19 https://riskatlas.principle.sg/taxonomy/r/20 https://riskatlas.principle.sg/taxonomy/r/21 https://riskatlas.principle.sg/taxonomy/r/22 https://riskatlas.principle.sg/taxonomy/r/23 https://riskatlas.principle.sg/taxonomy/r/24 https://riskatlas.principle.sg/taxonomy/r/25 https://riskatlas.principle.sg/taxonomy/r/26 https://riskatlas.principle.sg/taxonomy/r/27 https://riskatlas.principle.sg/taxonomy/r/28 https://riskatlas.principle.sg/taxonomy/r/29 https://riskatlas.principle.sg/taxonomy/r/30 https://riskatlas.principle.sg/taxonomy/r/31 https://riskatlas.principle.sg/taxonomy/r/32 https://riskatlas.principle.sg/taxonomy/r/33 https://riskatlas.principle.sg/taxonomy/r/34 https://riskatlas.principle.sg/taxonomy/r/35 https://riskatlas.principle.sg/taxonomy/r/36 https://riskatlas.principle.sg/taxonomy/r/37 https://riskatlas.principle.sg/taxonomy/r/38 https://riskatlas.principle.sg/taxonomy/r/39 https://riskatlas.principle.sg/taxonomy/r/40 https://riskatlas.principle.sg/taxonomy/r/41 https://riskatlas.principle.sg/taxonomy/r/42 https://riskatlas.principle.sg/taxonomy/r/43 https://riskatlas.principle.sg/taxonomy/r/44 https://riskatlas.principle.sg/taxonomy/risk-prompt-injection https://riskatlas.principle.sg/taxonomy/risk-indirect-injection https://riskatlas.principle.sg/taxonomy/risk-jailbreak https://riskatlas.principle.sg/taxonomy/risk-hallucination https://riskatlas.principle.sg/taxonomy/risk-overreliance https://riskatlas.principle.sg/taxonomy/risk-audit-tampering https://riskatlas.principle.sg/taxonomy/risk-model-degradation https://riskatlas.principle.sg/taxonomy/risk-data-poisoning https://riskatlas.principle.sg/taxonomy/risk-data-leakage https://riskatlas.principle.sg/taxonomy/risk-memory-poisoning https://riskatlas.principle.sg/taxonomy/risk-excessive-agency https://riskatlas.principle.sg/taxonomy/risk-tool-misuse https://riskatlas.principle.sg/taxonomy/risk-unsafe-execution https://riskatlas.principle.sg/taxonomy/risk-tool-poisoning https://riskatlas.principle.sg/taxonomy/risk-supply-chain https://riskatlas.principle.sg/taxonomy/risk-confused-deputy https://riskatlas.principle.sg/taxonomy/risk-rogue-agent https://riskatlas.principle.sg/taxonomy/risk-multi-agent-jailbreak https://riskatlas.principle.sg/taxonomy/risk-cascading-errors https://riskatlas.principle.sg/taxonomy/risk-agent-misalignment https://riskatlas.principle.sg/taxonomy/risk-resource-exhaustion https://riskatlas.principle.sg/taxonomy/risk-abliteration https://riskatlas.principle.sg/taxonomy/risk-backdoor https://riskatlas.principle.sg/taxonomy/risk-kv-cache-leak https://riskatlas.principle.sg/taxonomy/risk-inference-manipulation https://riskatlas.principle.sg/taxonomy/risk-capability-disclosure https://riskatlas.principle.sg/taxonomy/risk-parasocial https://riskatlas.principle.sg/taxonomy/risk-bias-amplification https://riskatlas.principle.sg/taxonomy/risk-allocation-harm https://riskatlas.principle.sg/taxonomy/risk-synthetic-impersonation https://riskatlas.principle.sg/taxonomy/risk-harmful-media-generation https://riskatlas.principle.sg/taxonomy/risk-provenance-evasion https://riskatlas.principle.sg/taxonomy/risk-training-data-rights https://riskatlas.principle.sg/controls https://riskatlas.principle.sg/glossary https://riskatlas.principle.sg/blocks https://riskatlas.principle.sg/blocks/cap-rag https://riskatlas.principle.sg/blocks/cap-tools https://riskatlas.principle.sg/blocks/cap-memory https://riskatlas.principle.sg/blocks/cap-agent https://riskatlas.principle.sg/blocks/cap-multiagent https://riskatlas.principle.sg/blocks/cap-computer-use https://riskatlas.principle.sg/blocks/cap-guardrails https://riskatlas.principle.sg/blocks/cap-identity https://riskatlas.principle.sg/blocks/cap-model https://riskatlas.principle.sg/blocks/cap-supply-chain https://riskatlas.principle.sg/blocks/cap-oversight https://riskatlas.principle.sg/blocks/cap-interface https://riskatlas.principle.sg/sources