@blamejs/exceptd-skills 0.12.24 → 0.12.26

package/data/_indexes/currency.json

@@ -6,7 +6,7 @@
     "decay_formula": "100 base; -30/-20/-10/-5 at 180/90/60/30-day thresholds. forward_watch count does NOT affect the score (it's a maintenance signal, not a staleness one). Label thresholds: ≥90 current, ≥70 acceptable, ≥50 stale, <50 critical_stale."
   },
   "summary": {
-    "current": 38,
+    "current": 39,
     "acceptable": 0,
     "stale": 0,
     "critical_stale": 0,
@@ -28,7 +28,7 @@
       "days_since_review": 0,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 8,
       "action_required": false
     },
     {
@@ -55,7 +55,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 3,
       "action_required": false
     },
     {
@@ -64,7 +64,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 4,
+      "forward_watch_count": 5,
       "action_required": false
     },
     {
@@ -91,7 +91,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 1,
       "action_required": false
     },
     {
@@ -190,7 +190,7 @@
       "days_since_review": 0,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 4,
       "action_required": false
     },
     {
@@ -199,7 +199,7 @@
       "days_since_review": 0,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 4,
       "action_required": false
     },
     {
@@ -244,7 +244,7 @@
       "days_since_review": 0,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 1,
       "action_required": false
     },
     {
@@ -292,6 +292,15 @@
       "forward_watch_count": 0,
       "action_required": false
     },
+    {
+      "skill": "sector-telecom",
+      "last_threat_review": "2026-05-15",
+      "days_since_review": -14,
+      "currency_score": 100,
+      "currency_label": "current",
+      "forward_watch_count": 7,
+      "action_required": false
+    },
     {
       "skill": "security-maturity-tiers",
       "last_threat_review": "2026-05-01",
@@ -316,7 +325,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 6,
+      "forward_watch_count": 8,
       "action_required": false
     },
     {
@@ -343,7 +352,7 @@
       "days_since_review": -10,
       "currency_score": 100,
       "currency_label": "current",
-      "forward_watch_count": 0,
+      "forward_watch_count": 1,
       "action_required": false
     },
     {

package/data/_indexes/frequency.json

@@ -125,11 +125,12 @@
         ]
       },
       "CWE-918": {
-        "count": 4,
+        "count": 5,
         "skills": [
           "api-security",
           "attack-surface-pentest",
           "mcp-agent-trust",
+          "sector-telecom",
           "webapp-security"
         ]
       },
@@ -244,7 +245,7 @@
         ]
       },
       "CWE-287": {
-        "count": 9,
+        "count": 10,
         "skills": [
           "age-gates-child-safety",
           "api-security",
@@ -254,15 +255,17 @@
           "sector-energy",
           "sector-financial",
           "sector-healthcare",
+          "sector-telecom",
           "webapp-security"
         ]
       },
       "CWE-306": {
-        "count": 3,
+        "count": 4,
         "skills": [
           "identity-assurance",
           "ot-ics-security",
-          "sector-energy"
+          "sector-energy",
+          "sector-telecom"
         ]
       },
       "CWE-798": {
@@ -340,25 +343,27 @@
         ]
       },
       "D3-IOPR": {
-        "count": 6,
+        "count": 7,
         "skills": [
           "ai-attack-surface",
           "ai-c2-detection",
           "defensive-countermeasure-mapping",
           "dlp-gap-analysis",
           "fuzz-testing-strategy",
-          "rag-pipeline-security"
+          "rag-pipeline-security",
+          "sector-telecom"
         ]
       },
       "D3-NTA": {
-        "count": 6,
+        "count": 7,
         "skills": [
           "ai-attack-surface",
           "ai-c2-detection",
           "attack-surface-pentest",
           "defensive-countermeasure-mapping",
           "dlp-gap-analysis",
-          "rag-pipeline-security"
+          "rag-pipeline-security",
+          "sector-telecom"
         ]
       },
       "D3-CBAN": {
@@ -410,18 +415,20 @@
         ]
       },
       "D3-NI": {
-        "count": 2,
+        "count": 3,
         "skills": [
           "ai-c2-detection",
-          "defensive-countermeasure-mapping"
+          "defensive-countermeasure-mapping",
+          "sector-telecom"
         ]
       },
       "D3-NTPM": {
-        "count": 3,
+        "count": 4,
         "skills": [
           "ai-c2-detection",
           "defensive-countermeasure-mapping",
-          "dlp-gap-analysis"
+          "dlp-gap-analysis",
+          "sector-telecom"
         ]
       },
       "D3-FE": {
@@ -834,6 +841,60 @@
           "ot-ics-security",
           "sector-energy"
         ]
+      },
+      "FCC-CPNI-4.1": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
+      "FCC-Cyber-Incident-Notification-2024": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
+      "NIS2-Annex-I-Telecom": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
+      "DORA-Art-21-Telecom-ICT": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
+      "UK-CAF-B5": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
+      "AU-ISM-1556": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
+      "GSMA-NESAS-Deployment": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
+      "3GPP-TR-33.926": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
+      "ITU-T-X.805": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
       }
     },
     "atlas_refs": {
@@ -930,6 +991,12 @@
           "ot-ics-security",
           "supply-chain-integrity"
         ]
+      },
+      "AML.T0040": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
       }
     },
     "attack_refs": {
@@ -964,7 +1031,7 @@
         ]
       },
       "T1190": {
-        "count": 12,
+        "count": 13,
         "skills": [
           "ai-attack-surface",
           "api-security",
@@ -977,6 +1044,7 @@
           "sector-energy",
           "sector-federal-government",
           "sector-financial",
+          "sector-telecom",
           "webapp-security"
         ]
       },
@@ -997,9 +1065,10 @@
         ]
       },
       "T1071": {
-        "count": 1,
+        "count": 2,
         "skills": [
-          "ai-c2-detection"
+          "ai-c2-detection",
+          "sector-telecom"
         ]
       },
       "T1102": {
@@ -1021,7 +1090,7 @@
         ]
       },
       "T1078": {
-        "count": 10,
+        "count": 11,
         "skills": [
           "age-gates-child-safety",
           "api-security",
@@ -1032,7 +1101,8 @@
           "incident-response-playbook",
           "sector-energy",
           "sector-financial",
-          "sector-healthcare"
+          "sector-healthcare",
+          "sector-telecom"
         ]
       },
       "T1567": {
@@ -1081,9 +1151,10 @@
         ]
       },
       "T1556": {
-        "count": 1,
+        "count": 2,
         "skills": [
-          "identity-assurance"
+          "identity-assurance",
+          "sector-telecom"
         ]
       },
       "T1110": {
@@ -1119,6 +1190,18 @@
           "sector-financial"
         ]
       },
+      "T1098": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
+      "T1199": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
+      },
       "T1552": {
         "count": 1,
         "skills": [
@@ -1309,6 +1392,12 @@
         "skills": [
           "pqc-first"
         ]
+      },
+      "RFC-9622": {
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
       }
     },
     "dlp_refs": {}
@@ -1317,7 +1406,7 @@
     "cwe_refs": [
       {
         "id": "CWE-287",
-        "count": 9,
+        "count": 10,
         "skills": [
           "age-gates-child-safety",
           "api-security",
@@ -1327,6 +1416,7 @@
           "sector-energy",
           "sector-financial",
           "sector-healthcare",
+          "sector-telecom",
           "webapp-security"
         ]
       },
@@ -1425,13 +1515,14 @@
         ]
       },
       {
-        "id": "CWE-1357",
-        "count": 4,
+        "id": "CWE-918",
+        "count": 5,
         "skills": [
-          "coordinated-vuln-disclosure",
-          "mlops-security",
-          "sector-federal-government",
-          "supply-chain-integrity"
+          "api-security",
+          "attack-surface-pentest",
+          "mcp-agent-trust",
+          "sector-telecom",
+          "webapp-security"
         ]
       }
     ],
@@ -1450,41 +1541,53 @@
         ]
       },
       {
-        "id": "D3-CSPP",
-        "count": 6,
+        "id": "D3-IOPR",
+        "count": 7,
         "skills": [
+          "ai-attack-surface",
           "ai-c2-detection",
-          "attack-surface-pentest",
           "defensive-countermeasure-mapping",
           "dlp-gap-analysis",
-          "mcp-agent-trust",
-          "rag-pipeline-security"
+          "fuzz-testing-strategy",
+          "rag-pipeline-security",
+          "sector-telecom"
         ]
       },
       {
-        "id": "D3-IOPR",
-        "count": 6,
+        "id": "D3-NTA",
+        "count": 7,
         "skills": [
           "ai-attack-surface",
           "ai-c2-detection",
+          "attack-surface-pentest",
           "defensive-countermeasure-mapping",
           "dlp-gap-analysis",
-          "fuzz-testing-strategy",
-          "rag-pipeline-security"
+          "rag-pipeline-security",
+          "sector-telecom"
         ]
       },
       {
-        "id": "D3-NTA",
+        "id": "D3-CSPP",
         "count": 6,
         "skills": [
-          "ai-attack-surface",
           "ai-c2-detection",
           "attack-surface-pentest",
           "defensive-countermeasure-mapping",
           "dlp-gap-analysis",
+          "mcp-agent-trust",
           "rag-pipeline-security"
         ]
       },
+      {
+        "id": "D3-NTPM",
+        "count": 4,
+        "skills": [
+          "ai-c2-detection",
+          "defensive-countermeasure-mapping",
+          "dlp-gap-analysis",
+          "sector-telecom"
+        ]
+      },
       {
         "id": "D3-CBAN",
         "count": 3,
@@ -1504,12 +1607,12 @@
         ]
       },
       {
-        "id": "D3-NTPM",
+        "id": "D3-NI",
         "count": 3,
         "skills": [
           "ai-c2-detection",
           "defensive-countermeasure-mapping",
-          "dlp-gap-analysis"
+          "sector-telecom"
         ]
       },
       {
@@ -1528,14 +1631,6 @@
           "defensive-countermeasure-mapping",
           "kernel-lpe-triage"
         ]
-      },
-      {
-        "id": "D3-CA",
-        "count": 2,
-        "skills": [
-          "ai-c2-detection",
-          "defensive-countermeasure-mapping"
-        ]
       }
     ],
     "framework_gaps": [
@@ -1753,12 +1848,19 @@
           "ai-attack-surface",
           "rag-pipeline-security"
         ]
+      },
+      {
+        "id": "AML.T0040",
+        "count": 1,
+        "skills": [
+          "sector-telecom"
+        ]
       }
     ],
     "attack_refs": [
       {
         "id": "T1190",
-        "count": 12,
+        "count": 13,
         "skills": [
           "ai-attack-surface",
           "api-security",
@@ -1771,12 +1873,13 @@
           "sector-energy",
           "sector-federal-government",
           "sector-financial",
+          "sector-telecom",
           "webapp-security"
         ]
       },
       {
         "id": "T1078",
-        "count": 10,
+        "count": 11,
         "skills": [
           "age-gates-child-safety",
           "api-security",
@@ -1787,7 +1890,8 @@
           "incident-response-playbook",
           "sector-energy",
           "sector-financial",
-          "sector-healthcare"
+          "sector-healthcare",
+          "sector-telecom"
         ]
       },
       {
@@ -1992,9 +2096,17 @@
       "D3-SCP"
     ],
     "framework_gaps": [
+      "3GPP-TR-33.926",
       "ALL-MCP-TOOL-TRUST",
+      "AU-ISM-1556",
       "CWE-Top-25-2024-meta",
       "CycloneDX-v1.6-SBOM",
+      "DORA-Art-21-Telecom-ICT",
+      "FCC-CPNI-4.1",
+      "FCC-Cyber-Incident-Notification-2024",
+      "GSMA-NESAS-Deployment",
+      "ITU-T-X.805",
+      "NIS2-Annex-I-Telecom",
       "NIST-800-53-SI-12",
       "NIST-800-53-SI-2",
       "NIST-800-63B-rev4",
@@ -2004,20 +2116,23 @@
       "PCI-DSS-4.0-6.3.3",
       "PTES-Pre-engagement",
       "SPDX-v3.0-SBOM",
+      "UK-CAF-B5",
       "VEX-CSAF-v2.1"
     ],
-    "atlas_refs": [],
+    "atlas_refs": [
+      "AML.T0040"
+    ],
     "attack_refs": [
-      "T1071",
+      "T1098",
       "T1102",
       "T1110",
       "T1133",
       "T1195.002",
+      "T1199",
       "T1213",
       "T1505",
       "T1548.001",
       "T1552",
-      "T1556",
       "T1566.001",
       "T1566.002",
       "T1566.003",
@@ -2034,6 +2149,7 @@
       "RFC-9000",
       "RFC-9106",
       "RFC-9420",
+      "RFC-9622",
       "RFC-9794"
     ],
     "dlp_refs": []
@@ -2063,12 +2179,26 @@
       "CWE-916"
     ],
     "atlas_refs": [
+      "AML.T0001",
+      "AML.T0011.002",
       "AML.T0024",
       "AML.T0044",
       "AML.T0048",
       "AML.T0053",
       "AML.T0055",
-      "AML.T0057"
+      "AML.T0057",
+      "AML.T0097",
+      "AML.T0098",
+      "AML.T0099",
+      "AML.T0100",
+      "AML.T0101",
+      "AML.T0102",
+      "AML.T0103",
+      "AML.T0104",
+      "AML.T0105",
+      "AML.T0106",
+      "AML.T0107",
+      "AML.T0108"
     ],
     "d3fend_refs": [
       "D3-ANCI",
@@ -2086,10 +2216,26 @@
       "AU-Essential-8-MFA",
       "AU-Essential-8-Patch",
       "DORA-Art28",
+      "DORA-IA-CTPP-Oversight",
+      "DORA-ITS-TLPT",
+      "DORA-RTS-Incident-Classification",
+      "DORA-RTS-Subcontracting",
+      "EU-AI-Act-Annex-IX-Conformity",
       "EU-AI-Act-Art-15",
+      "EU-AI-Act-Art-53-GPAI",
+      "EU-AI-Act-Art-55-Systemic",
+      "EU-AI-Act-GPAI-CoP",
       "EU-CRA-Art13",
+      "HIPAA-Security-Rule-2026-NPRM-164.308",
+      "HIPAA-Security-Rule-2026-NPRM-164.310",
+      "HIPAA-Security-Rule-2026-NPRM-164.312",
+      "HIPAA-Security-Rule-2026-NPRM-164.314",
       "NIS2-Art21-incident-handling",
       "NIST-800-53-SI-10",
+      "PCI-DSS-4.0.1-11.6.1",
+      "PCI-DSS-4.0.1-12.10.7",
+      "PCI-DSS-4.0.1-12.3.3",
+      "PCI-DSS-4.0.1-6.4.3",
       "UK-CAF-A1",
       "UK-CAF-B2",
       "UK-CAF-C1",
@@ -2104,10 +2250,16 @@
       "RFC-6546",
       "RFC-7208",
       "RFC-7489",
+      "RFC-7644",
       "RFC-7970",
+      "RFC-8460",
       "RFC-8461",
       "RFC-8616",
-      "RFC-9116"
+      "RFC-8617",
+      "RFC-8705",
+      "RFC-9112",
+      "RFC-9116",
+      "RFC-9449"
     ],
     "dlp_refs": [
       "DLP-CHAN-CLIPBOARD-AI",

package/data/_indexes/handoff-dag.json

@@ -31,6 +31,7 @@
     "sector-federal-government",
     "sector-financial",
     "sector-healthcare",
+    "sector-telecom",
     "security-maturity-tiers",
     "skill-update-loop",
     "supply-chain-integrity",
@@ -294,6 +295,7 @@
       "rag-pipeline-security",
       "supply-chain-integrity"
     ],
+    "sector-telecom": [],
     "api-security": [
       "ai-c2-detection",
       "defensive-countermeasure-mapping",
@@ -425,6 +427,7 @@
     "sector-federal-government": 4,
     "sector-financial": 5,
     "sector-healthcare": 4,
+    "sector-telecom": 0,
     "security-maturity-tiers": 1,
     "skill-update-loop": 2,
     "supply-chain-integrity": 15,
@@ -465,6 +468,7 @@
     "sector-federal-government": 9,
     "sector-financial": 12,
     "sector-healthcare": 12,
+    "sector-telecom": 0,
     "security-maturity-tiers": 0,
     "skill-update-loop": 21,
     "supply-chain-integrity": 2,

package/data/_indexes/jurisdiction-clocks.json

@@ -38,9 +38,9 @@
             "trigger": "Major ICT-related incident (RTO/RPO breach, high financial impact, reputational damage)",
             "stages": null,
             "source": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554",
-            "authority": "ESAs (EBA, EIOPA, ESMA)"
+            "authority": "ESAs (EBA, EIOPA, ESMA) + Lead Overseers (CTPP regime from H2 2026)"
           },
-          "authority": "ESAs (EBA, EIOPA, ESMA)"
+          "authority": "ESAs (EBA, EIOPA, ESMA) + Lead Overseers (CTPP regime from H2 2026)"
         },
         "EU_CRA": {
           "breach_notification": {