document_id: AICSR-REF-INDEX-2026-001
version: '1.1'
generated: '2026-05-31'
maintainer: boardroom reference archive
articles_dir: output/references/articles
index:
  markdown: output/references/REFERENCE-AVAILABILITY-REPORT.md
  latex: output/references/REFERENCE-AVAILABILITY-REPORT.tex
  pdf: output/references/REFERENCE-AVAILABILITY-REPORT.pdf
counts:
  total: 38
  available: 38
  partial: 0
  unavailable: 0
fallback_sources:
  mitre-atlas:
  - method: github_yaml_mirror
    url: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/v6/ATLAS-2026.05.yaml
    note: Primary https://atlas.mitre.org/ is a JavaScript SPA with no static HTML
      body. MITRE publishes canonical ATLAS matrix data in the public mitre-atlas/atlas-data
      repository.
  njccic-house:
  - method: corroborating_encyclopedia
    url: https://en.wikipedia.org/wiki/Salt_Typhoon
    note: Primary NJCCIC advisory is behind Imperva Incapsula bot protection (iframe
      challenge, no article body). Wikipedia Salt Typhoon article cites the Financial
      Times reporting on congressional committee staff email compromise.
  - method: corroborating_press
    url: https://news.slashdot.org/story/26/01/08/1559224/china-hacked-email-systems-of-us-congressional-committee-staff
    note: 'Secondary fallback: Slashdot syndication of the Financial Times story when
      Wikipedia is unreachable.'
  gao-classified:
  - method: corroborating_press
    url: https://news.bgov.com/bloomberg-government-news/us-companies-had-815-classified-data-violations-gao-finds
    note: Primary gao.gov product page and PDF return HTTP 403 to automated clients
      (Akamai/WAF). Bloomberg Government published an executive summary of GAO-26-107861
      findings.
  gao-water:
  - method: corroborating_press
    url: https://www.route-fifty.com/cybersecurity/2026/02/gao-finds-gaps-water-sector-cybersecurity/402456/
    note: Primary gao.gov product page and PDF return HTTP 403 to automated clients.
      Route Fifty published a summary of GAO-26-109159 water-sector cybersecurity
      gaps.
  sigstore-cosign:
  - method: url_redirect
    url: https://docs.sigstore.dev/cosign/
    note: Legacy path /cosign/overview/ returns HTTP 404 after Sigstore docs restructure.
      Current cosign documentation root is /cosign/.
articles:
- key: nist-airmf
  title: NIST AI Risk Management Framework 1.0
  status: available
  url: https://www.nist.gov/itl/ai-risk-management-framework
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/nist-airmf.md
  pdf: output/references/articles/nist-airmf.pdf
- key: nist-genai
  title: NIST Generative AI Profile (NIST.AI.600-1)
  status: available
  url: https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/nist-genai.md
  pdf: output/references/articles/nist-genai.pdf
- key: owasp-llm
  title: OWASP Top 10 for LLM Applications 2025
  status: available
  url: https://genai.owasp.org/llm-top-10/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/owasp-llm.md
  pdf: output/references/articles/owasp-llm.pdf
- key: cisa-kev
  title: CISA Known Exploited Vulnerabilities Catalog
  status: available
  url: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/cisa-kev.md
  pdf: output/references/articles/cisa-kev.pdf
- key: slsa
  title: SLSA Supply-chain Levels for Software Artifacts v1.0
  status: available
  url: https://slsa.dev/spec/v1.0/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/slsa.md
  pdf: output/references/articles/slsa.pdf
- key: mitre-atlas
  title: "MITRE ATLAS \u2014 Adversarial ML"
  status: available
  url: https://atlas.mitre.org/
  capture_method: github_yaml_mirror
  fallback_url: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/v6/ATLAS-2026.05.yaml
  md: output/references/articles/mitre-atlas.md
  pdf: output/references/articles/mitre-atlas.pdf
- key: gao-classified
  title: "GAO-26-107861 \u2014 815 Classified Contractor Security Violations"
  status: available
  url: https://www.gao.gov/products/gao-26-107861
  capture_method: corroborating_press
  fallback_url: https://news.bgov.com/bloomberg-government-news/us-companies-had-815-classified-data-violations-gao-finds
  md: output/references/articles/gao-classified.md
  pdf: output/references/articles/gao-classified.pdf
- key: csa-cisa
  title: "CSA Research Note \u2014 CISA Leadership Governance Vacuum (2026-04-24)"
  status: available
  url: https://labs.cloudsecurityalliance.org/research/csa-research-note-cisa-leadership-governance-vacuum-20260424/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/csa-cisa.md
  pdf: output/references/articles/csa-cisa.pdf
- key: gca-salt
  title: "GCA \u2014 Salt Typhoon Across the Internet"
  status: available
  url: https://globalcyberalliance.org/new-report-salt-typhoon-across-the-internet/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/gca-salt.md
  pdf: output/references/articles/gca-salt.pdf
- key: cisa-salt
  title: "CISA Advisory AA25-239A \u2014 Salt Typhoon"
  status: available
  url: https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239a
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/cisa-salt.md
  pdf: output/references/articles/cisa-salt.pdf
- key: trend-q1
  title: "Trend Micro \u2014 U.S. Public Sector Under Siege Q1 2026"
  status: available
  url: https://www.trendmicro.com/en_us/research/26/d/us-public-sector-under-siege.html
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/trend-q1.md
  pdf: output/references/articles/trend-q1.pdf
- key: techcrunch-cisa
  title: "TechCrunch \u2014 Acting CISA chief uploaded FOUO docs to ChatGPT"
  status: available
  url: https://techcrunch.com/2026/01/28/trumps-acting-cybersecurity-chief-uploaded-sensitive-government-docs-to-chatgpt/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/techcrunch-cisa.md
  pdf: output/references/articles/techcrunch-cisa.pdf
- key: gao-water
  title: "GAO-26-109159 \u2014 Water Sector Cybersecurity"
  status: available
  url: https://www.gao.gov/products/gao-26-109159
  capture_method: corroborating_press
  fallback_url: https://www.route-fifty.com/cybersecurity/2026/02/gao-finds-gaps-water-sector-cybersecurity/402456/
  md: output/references/articles/gao-water.md
  pdf: output/references/articles/gao-water.pdf
- key: eo-14409
  title: "White House EO 14409 \u2014 AI Innovation and Security (2026-06-02)"
  status: available
  url: https://www.whitehouse.gov/presidential-actions/2026/06/promoting-advanced-artificial-intelligence-innovation-and-security/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/eo-14409.md
  pdf: output/references/articles/eo-14409.pdf
- key: csa-nvd
  title: "CSA Whitepaper \u2014 NVD Infrastructure Crisis & AI Vulnerability Discovery"
  status: available
  url: https://labs.cloudsecurityalliance.org/wp-content/uploads/2026/05/CSA_whitepaper_NVD_infrastructure_crisis_AI_vulnerability_discovery_20260504-csa-styled.pdf
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/csa-nvd.md
  pdf: output/references/articles/csa-nvd.pdf
- key: litellm-kev
  title: "CISA Alert \u2014 CVE-2026-42271 LiteLLM added to KEV"
  status: available
  url: https://www.cisa.gov/news-events/alerts/2026/06/08/cisa-adds-two-known-exploited-vulnerabilities-catalog
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/litellm-kev.md
  pdf: output/references/articles/litellm-kev.pdf
- key: horizon3-chain
  title: "Horizon3.ai \u2014 LiteLLM chained with Starlette BadHost RCE"
  status: available
  url: https://horizon3.ai/attack-research/vulnerabilities/cve-2026-42271-chained-with-cve-2026-48710/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/horizon3-chain.md
  pdf: output/references/articles/horizon3-chain.pdf
- key: litellm-sqli
  title: "The Hacker News \u2014 LiteLLM CVE-2026-42208 exploited within 36h"
  status: available
  url: https://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.html
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/litellm-sqli.md
  pdf: output/references/articles/litellm-sqli.pdf
- key: ostif-badhost
  title: "OSTIF \u2014 BadHost vulnerability in Starlette"
  status: available
  url: https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/ostif-badhost.md
  pdf: output/references/articles/ostif-badhost.pdf
- key: njccic-house
  title: "NJCCIC \u2014 Salt Typhoon targets House Committee emails"
  status: available
  url: https://www.cyber.nj.gov/Home/Components/News/News/1935/214
  capture_method: corroborating_encyclopedia
  fallback_url: https://en.wikipedia.org/wiki/Salt_Typhoon
  md: output/references/articles/njccic-house.md
  pdf: output/references/articles/njccic-house.pdf
- key: iec-62443
  title: ISA/IEC 62443 Industrial Cybersecurity Standards
  status: available
  url: https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standards
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/iec-62443.md
  pdf: output/references/articles/iec-62443.pdf
- key: fbi-salt
  title: "CyberScoop \u2014 FBI confirms Salt Typhoon still ongoing (Feb 2026)"
  status: available
  url: https://cyberscoop.com/fbi-salt-typhoon-ongoing-threat-cybertalks-2026/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/fbi-salt.md
  pdf: output/references/articles/fbi-salt.pdf
- key: ms-isac
  title: "StateScoop \u2014 CISA ending MS-ISAC support"
  status: available
  url: https://statescoop.com/cisa-confirms-its-ending-ms-isac-support/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/ms-isac.md
  pdf: output/references/articles/ms-isac.pdf
- key: bgov-gao
  title: "Bloomberg Government \u2014 815 classified data violations summary"
  status: available
  url: https://news.bgov.com/bloomberg-government-news/us-companies-had-815-classified-data-violations-gao-finds
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/bgov-gao.md
  pdf: output/references/articles/bgov-gao.pdf
- key: study-ref
  title: AI Cyber Security Research Study AICSR-STUDY-2026-001
  status: available
  url: output/Cyber-Security-AI-Diligence-Research-Study.md
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/study-ref.md
  pdf: output/references/articles/study-ref.pdf
- key: mit-ref
  title: MVAP Complete Mitigation Strategy AICSR-MIT-2026-001
  status: available
  url: output/MVAP-Complete-Mitigation-Strategy.md
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/mit-ref.md
  pdf: output/references/articles/mit-ref.pdf
- key: dlg-ref
  title: Boardroom Complete Dialog Transcript AICSR-DLG-2026-001
  status: available
  url: output/Boardroom-Complete-Dialog-Transcript.md
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/dlg-ref.md
  pdf: output/references/articles/dlg-ref.pdf
- key: abs-ref
  title: Boardroom Comprehensive Abstracts AICSR-ABS-2026-001
  status: available
  url: output/Boardroom-Comprehensive-Abstracts.md
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/abs-ref.md
  pdf: output/references/articles/abs-ref.pdf
- key: method-ref
  title: How the Research Was Done AICSR-METHOD-2026-001
  status: available
  url: output/How-The-Research-Was-Done.md
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/method-ref.md
  pdf: output/references/articles/method-ref.pdf
- key: matindex-ref
  title: Research Materials Index AICSR-MATINDEX-2026-001
  status: available
  url: output/RESEARCH-MATERIALS-INDEX.md
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/matindex-ref.md
  pdf: output/references/articles/matindex-ref.pdf
- key: vote-record-ref
  title: Formal Vote Record with dissent rationale
  status: available
  url: sessions/VOTE-RECORD.md
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/vote-record-ref.md
  pdf: output/references/articles/vote-record-ref.pdf
- key: project-ref
  title: "PROJECT.md \u2014 boardroom project metadata"
  status: available
  url: PROJECT.md
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/project-ref.md
  pdf: output/references/articles/project-ref.pdf
- key: sigstore-cosign
  title: "Sigstore cosign \u2014 container/signing verification"
  status: available
  url: https://docs.sigstore.dev/cosign/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/sigstore-cosign.md
  pdf: output/references/articles/sigstore-cosign.pdf
- key: gdpr-art32
  title: "GDPR Article 32 \u2014 Security of processing"
  status: available
  url: https://gdpr-info.eu/art-32-gdpr/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/gdpr-art32.md
  pdf: output/references/articles/gdpr-art32.pdf
- key: owasp-llm01
  title: "OWASP LLM01 \u2014 Prompt Injection"
  status: available
  url: https://genai.owasp.org/llmrisk/llm01-prompt-injection/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/owasp-llm01.md
  pdf: output/references/articles/owasp-llm01.pdf
- key: owasp-llm02
  title: "OWASP LLM02 \u2014 Sensitive Information Disclosure"
  status: available
  url: https://genai.owasp.org/llmrisk/llm022025-sensitive-information-disclosure/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/owasp-llm02.md
  pdf: output/references/articles/owasp-llm02.pdf
- key: mitre-t1558-003
  title: "MITRE ATT&CK T1558.003 \u2014 Kerberoasting"
  status: available
  url: https://attack.mitre.org/techniques/T1558/003/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/mitre-t1558-003.md
  pdf: output/references/articles/mitre-t1558-003.pdf
- key: mitre-t1059-001
  title: "MITRE ATT&CK T1059.001 \u2014 PowerShell"
  status: available
  url: https://attack.mitre.org/techniques/T1059/001/
  capture_method: primary
  fallback_url: ''
  md: output/references/articles/mitre-t1059-001.md
  pdf: output/references/articles/mitre-t1059-001.pdf
regeneration: See output/references/CONTINUE-REFERENCES.md
