@blamejs/exceptd-skills 0.16.10 → 0.16.11

package/data/_indexes/chains.json

@@ -8748,7 +8748,8 @@
       "api-security",
       "container-runtime-security",
       "mlops-security",
-      "idp-incident-response"
+      "idp-incident-response",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -8807,11 +8808,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-345",
           "name": "Insufficient Verification of Data Authenticity",
           "category": "Authenticity / Supply Chain"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -8847,6 +8858,11 @@
           "name": "Insufficiently Protected Credentials",
           "category": "Credentials Management"
         },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
         {
           "id": "CWE-732",
           "name": "Incorrect Permission Assignment for Critical Resource",
@@ -9068,6 +9084,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Supply Chain Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-AI-RMF-MEASURE-2.5",
           "framework": "NIST AI RMF 1.0",
@@ -9118,6 +9139,11 @@
           "framework": "SWIFT Customer Security Controls Framework v2026",
           "control_name": "SWIFT Environment Protection"
         },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        },
         {
           "id": "UK-CAF-B2-IdP-Tenant",
           "framework": "UK NCSC CAF",
@@ -9140,10 +9166,13 @@
         "T1195.002",
         "T1199",
         "T1505",
+        "T1550",
         "T1554",
+        "T1556",
         "T1556.007",
         "T1565",
         "T1567",
+        "T1606",
         "T1606.002",
         "T1610",
         "T1611"
@@ -24078,7 +24107,8 @@
       "compliance-theater",
       "attack-surface-pentest",
       "ot-ics-security",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -24107,6 +24137,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -24122,11 +24157,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -24177,6 +24222,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -24308,6 +24358,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -24328,6 +24383,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -24343,6 +24403,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -24358,6 +24423,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -24392,6 +24462,11 @@
           "id": "SOC2-CC6-logical-access",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Logical and Physical Access Controls"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -24403,7 +24478,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -24424,7 +24502,8 @@
       "compliance-theater",
       "attack-surface-pentest",
       "ot-ics-security",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -24453,6 +24532,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -24468,11 +24552,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -24523,6 +24617,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -24654,6 +24753,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -24674,6 +24778,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -24689,6 +24798,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -24704,6 +24818,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -24738,6 +24857,11 @@
           "id": "SOC2-CC6-logical-access",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Logical and Physical Access Controls"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -24749,7 +24873,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -24772,7 +24899,8 @@
       "attack-surface-pentest",
       "dlp-gap-analysis",
       "ot-ics-security",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -24821,11 +24949,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -24876,6 +25014,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -25032,6 +25175,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.16",
           "framework": "ISO/IEC 27001:2022",
@@ -25062,6 +25210,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -25077,6 +25230,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-28",
           "framework": "NIST SP 800-53 Rev 5",
@@ -25102,6 +25260,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -25141,6 +25304,11 @@
           "id": "SOC2-CC7-anomaly-detection",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -25157,9 +25325,12 @@
         "T1213",
         "T1530",
         "T1548.001",
+        "T1550",
+        "T1556",
         "T1566",
         "T1567",
-        "T1568"
+        "T1568",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -28763,7 +28934,8 @@
       "attack-surface-pentest",
       "ot-ics-security",
       "coordinated-vuln-disclosure",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -28797,6 +28969,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -28812,11 +28989,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -28867,6 +29054,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -28998,6 +29190,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -29018,6 +29215,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -29038,6 +29240,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -29053,6 +29260,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -29092,6 +29304,11 @@
           "id": "SOC2-CC9-vendor-management",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -29103,7 +29320,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -29125,7 +29345,8 @@
       "attack-surface-pentest",
       "ot-ics-security",
       "coordinated-vuln-disclosure",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -29159,6 +29380,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -29174,11 +29400,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -29229,6 +29465,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -29360,6 +29601,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -29380,6 +29626,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -29400,6 +29651,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -29415,6 +29671,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -29454,6 +29715,11 @@
           "id": "SOC2-CC9-vendor-management",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -29465,7 +29731,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -36785,7 +37054,8 @@
       "attack-surface-pentest",
       "ot-ics-security",
       "coordinated-vuln-disclosure",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -36819,6 +37089,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -36834,11 +37109,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -36889,6 +37174,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -37020,6 +37310,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -37040,6 +37335,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -37060,6 +37360,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -37075,6 +37380,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -37114,6 +37424,11 @@
           "id": "SOC2-CC9-vendor-management",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -37125,7 +37440,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -37147,7 +37465,8 @@
       "attack-surface-pentest",
       "ot-ics-security",
       "coordinated-vuln-disclosure",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -37181,6 +37500,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -37196,11 +37520,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -37251,6 +37585,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -37382,6 +37721,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -37402,6 +37746,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -37422,6 +37771,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -37437,6 +37791,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -37476,6 +37835,11 @@
           "id": "SOC2-CC9-vendor-management",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -37487,7 +37851,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -37509,7 +37876,8 @@
       "attack-surface-pentest",
       "ot-ics-security",
       "coordinated-vuln-disclosure",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -37543,6 +37911,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -37558,11 +37931,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -37613,6 +37996,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -37744,6 +38132,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -37764,6 +38157,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -37784,6 +38182,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -37799,6 +38202,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -37838,6 +38246,11 @@
           "id": "SOC2-CC9-vendor-management",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -37849,7 +38262,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -37871,7 +38287,8 @@
       "attack-surface-pentest",
       "ot-ics-security",
       "coordinated-vuln-disclosure",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -37905,6 +38322,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -37920,11 +38342,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -37975,6 +38407,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -38106,6 +38543,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -38126,6 +38568,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -38146,6 +38593,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -38161,6 +38613,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -38200,6 +38657,11 @@
           "id": "SOC2-CC9-vendor-management",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -38211,7 +38673,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -38233,7 +38698,8 @@
       "attack-surface-pentest",
       "ot-ics-security",
       "coordinated-vuln-disclosure",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -38267,6 +38733,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -38282,11 +38753,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -38337,6 +38818,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -38468,6 +38954,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -38488,6 +38979,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -38508,6 +39004,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -38523,6 +39024,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -38562,6 +39068,11 @@
           "id": "SOC2-CC9-vendor-management",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -38573,7 +39084,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -38595,7 +39109,8 @@
       "attack-surface-pentest",
       "ot-ics-security",
       "coordinated-vuln-disclosure",
-      "sector-energy"
+      "sector-energy",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -38629,6 +39144,11 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
         {
           "id": "CWE-22",
           "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
@@ -38644,11 +39164,21 @@
           "name": "Improper Authentication",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-306",
           "name": "Missing Authentication for Critical Function",
           "category": "Authentication"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
         {
           "id": "CWE-352",
           "name": "Cross-Site Request Forgery (CSRF)",
@@ -38699,6 +39229,11 @@
           "name": "Use of Hard-coded Credentials",
           "category": "Credentials"
         },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-89",
           "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
@@ -38830,6 +39365,11 @@
           "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
           "control_name": "System security requirements and security levels"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -38850,6 +39390,11 @@
           "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
           "control_name": "Security event monitoring"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
@@ -38870,6 +39415,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -38885,6 +39435,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "NIST-800-82r3",
           "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
@@ -38924,6 +39479,11 @@
           "id": "SOC2-CC9-vendor-management",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -38935,7 +39495,10 @@
         "T1133",
         "T1190",
         "T1548.001",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": [
         "RFC-4301",
@@ -45940,7 +46503,8 @@
       "ai-attack-surface",
       "compliance-theater",
       "pqc-first",
-      "dlp-gap-analysis"
+      "dlp-gap-analysis",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -45959,11 +46523,31 @@
           "name": "Exposure of Sensitive Information to an Unauthorized Actor",
           "category": "Information Exposure"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-327",
           "name": "Use of a Broken or Risky Cryptographic Algorithm",
           "category": "Cryptography"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-94",
           "name": "Improper Control of Generation of Code (Code Injection)",
@@ -46075,6 +46659,11 @@
           "framework": "HIPAA Security Rule (45 CFR § 164.312)",
           "control_name": "Access control standard (technical safeguards)"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.16",
           "framework": "ISO/IEC 27001:2022",
@@ -46095,11 +46684,21 @@
           "framework": "ISO/IEC 42001:2023 (AI Management System)",
           "control_name": "AI risk assessment"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIST-800-53-AC-2",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-28",
           "framework": "NIST SP 800-53 Rev 5",
@@ -46120,6 +46719,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "OWASP-LLM-Top-10-2025-LLM01",
           "framework": "OWASP Top 10 for LLM Applications 2025",
@@ -46139,6 +46743,11 @@
           "id": "SOC2-CC7-anomaly-detection",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -46147,8 +46756,11 @@
         "T1190",
         "T1213",
         "T1530",
+        "T1550",
+        "T1556",
         "T1566",
-        "T1567"
+        "T1567",
+        "T1606"
       ],
       "rfc_refs": [
         "DRAFT-IETF-TLS-ECDHE-MLKEM",
@@ -46173,7 +46785,8 @@
       "ai-attack-surface",
       "compliance-theater",
       "pqc-first",
-      "dlp-gap-analysis"
+      "dlp-gap-analysis",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -46192,11 +46805,31 @@
           "name": "Exposure of Sensitive Information to an Unauthorized Actor",
           "category": "Information Exposure"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-327",
           "name": "Use of a Broken or Risky Cryptographic Algorithm",
           "category": "Cryptography"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-94",
           "name": "Improper Control of Generation of Code (Code Injection)",
@@ -46308,6 +46941,11 @@
           "framework": "HIPAA Security Rule (45 CFR § 164.312)",
           "control_name": "Access control standard (technical safeguards)"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.16",
           "framework": "ISO/IEC 27001:2022",
@@ -46328,11 +46966,21 @@
           "framework": "ISO/IEC 42001:2023 (AI Management System)",
           "control_name": "AI risk assessment"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIST-800-53-AC-2",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-28",
           "framework": "NIST SP 800-53 Rev 5",
@@ -46353,6 +47001,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "OWASP-LLM-Top-10-2025-LLM01",
           "framework": "OWASP Top 10 for LLM Applications 2025",
@@ -46372,6 +47025,11 @@
           "id": "SOC2-CC7-anomaly-detection",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -46380,8 +47038,11 @@
         "T1190",
         "T1213",
         "T1530",
+        "T1550",
+        "T1556",
         "T1566",
-        "T1567"
+        "T1567",
+        "T1606"
       ],
       "rfc_refs": [
         "DRAFT-IETF-TLS-ECDHE-MLKEM",
@@ -48662,7 +49323,8 @@
     "epss_score": null,
     "referencing_skills": [
       "ai-attack-surface",
-      "compliance-theater"
+      "compliance-theater",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -48676,6 +49338,31 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-94",
           "name": "Improper Control of Generation of Code (Code Injection)",
@@ -48757,6 +49444,11 @@
           "framework": "FedRAMP Rev 5 Moderate",
           "control_name": "FedRAMP Moderate baseline (NIST 800-53 Rev 5 tailoring)"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -48767,16 +49459,31 @@
           "framework": "ISO/IEC 23894:2023 (AI Risk Management Guidance)",
           "control_name": "AI risk management process"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIST-800-53-AC-2",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SI-3",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "OWASP-LLM-Top-10-2025-LLM01",
           "framework": "OWASP Top 10 for LLM Applications 2025",
@@ -48791,12 +49498,20 @@
           "id": "SOC2-CC6-logical-access",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Logical and Physical Access Controls"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
         "T1059",
         "T1190",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": []
     }
@@ -48809,7 +49524,8 @@
     "epss_score": null,
     "referencing_skills": [
       "ai-attack-surface",
-      "compliance-theater"
+      "compliance-theater",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -48823,6 +49539,31 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-94",
           "name": "Improper Control of Generation of Code (Code Injection)",
@@ -48904,6 +49645,11 @@
           "framework": "FedRAMP Rev 5 Moderate",
           "control_name": "FedRAMP Moderate baseline (NIST 800-53 Rev 5 tailoring)"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -48914,16 +49660,31 @@
           "framework": "ISO/IEC 23894:2023 (AI Risk Management Guidance)",
           "control_name": "AI risk management process"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIST-800-53-AC-2",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SI-3",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "OWASP-LLM-Top-10-2025-LLM01",
           "framework": "OWASP Top 10 for LLM Applications 2025",
@@ -48938,12 +49699,20 @@
           "id": "SOC2-CC6-logical-access",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Logical and Physical Access Controls"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
         "T1059",
         "T1190",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": []
     }
@@ -48958,7 +49727,8 @@
       "ai-attack-surface",
       "compliance-theater",
       "pqc-first",
-      "dlp-gap-analysis"
+      "dlp-gap-analysis",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -48977,11 +49747,31 @@
           "name": "Exposure of Sensitive Information to an Unauthorized Actor",
           "category": "Information Exposure"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-327",
           "name": "Use of a Broken or Risky Cryptographic Algorithm",
           "category": "Cryptography"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-94",
           "name": "Improper Control of Generation of Code (Code Injection)",
@@ -49093,6 +49883,11 @@
           "framework": "HIPAA Security Rule (45 CFR § 164.312)",
           "control_name": "Access control standard (technical safeguards)"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.16",
           "framework": "ISO/IEC 27001:2022",
@@ -49113,11 +49908,21 @@
           "framework": "ISO/IEC 42001:2023 (AI Management System)",
           "control_name": "AI risk assessment"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIST-800-53-AC-2",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-28",
           "framework": "NIST SP 800-53 Rev 5",
@@ -49138,6 +49943,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "OWASP-LLM-Top-10-2025-LLM01",
           "framework": "OWASP Top 10 for LLM Applications 2025",
@@ -49157,6 +49967,11 @@
           "id": "SOC2-CC7-anomaly-detection",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -49165,8 +49980,11 @@
         "T1190",
         "T1213",
         "T1530",
+        "T1550",
+        "T1556",
         "T1566",
-        "T1567"
+        "T1567",
+        "T1606"
       ],
       "rfc_refs": [
         "DRAFT-IETF-TLS-ECDHE-MLKEM",
@@ -49191,7 +50009,8 @@
       "ai-attack-surface",
       "compliance-theater",
       "pqc-first",
-      "dlp-gap-analysis"
+      "dlp-gap-analysis",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -49210,11 +50029,31 @@
           "name": "Exposure of Sensitive Information to an Unauthorized Actor",
           "category": "Information Exposure"
         },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
         {
           "id": "CWE-327",
           "name": "Use of a Broken or Risky Cryptographic Algorithm",
           "category": "Cryptography"
         },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-94",
           "name": "Improper Control of Generation of Code (Code Injection)",
@@ -49326,6 +50165,11 @@
           "framework": "HIPAA Security Rule (45 CFR § 164.312)",
           "control_name": "Access control standard (technical safeguards)"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.16",
           "framework": "ISO/IEC 27001:2022",
@@ -49346,11 +50190,21 @@
           "framework": "ISO/IEC 42001:2023 (AI Management System)",
           "control_name": "AI risk assessment"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIST-800-53-AC-2",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-28",
           "framework": "NIST SP 800-53 Rev 5",
@@ -49371,6 +50225,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "OWASP-LLM-Top-10-2025-LLM01",
           "framework": "OWASP Top 10 for LLM Applications 2025",
@@ -49390,6 +50249,11 @@
           "id": "SOC2-CC7-anomaly-detection",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
@@ -49398,8 +50262,11 @@
         "T1190",
         "T1213",
         "T1530",
+        "T1550",
+        "T1556",
         "T1566",
-        "T1567"
+        "T1567",
+        "T1606"
       ],
       "rfc_refs": [
         "DRAFT-IETF-TLS-ECDHE-MLKEM",
@@ -75759,7 +76626,8 @@
     "epss_score": 0.00125,
     "referencing_skills": [
       "ai-attack-surface",
-      "compliance-theater"
+      "compliance-theater",
+      "vc-wallet-trust"
     ],
     "chain": {
       "cwes": [
@@ -75773,6 +76641,31 @@
           "name": "Improper Validation of Generative AI Output",
           "category": "AI/ML"
         },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
         {
           "id": "CWE-94",
           "name": "Improper Control of Generation of Code (Code Injection)",
@@ -75854,6 +76747,11 @@
           "framework": "FedRAMP Rev 5 Moderate",
           "control_name": "FedRAMP Moderate baseline (NIST 800-53 Rev 5 tailoring)"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.28",
           "framework": "ISO/IEC 27001:2022",
@@ -75864,16 +76762,31 @@
           "framework": "ISO/IEC 23894:2023 (AI Risk Management Guidance)",
           "control_name": "AI risk management process"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIST-800-53-AC-2",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Account Management"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SI-3",
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Malicious Code Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "OWASP-LLM-Top-10-2025-LLM01",
           "framework": "OWASP Top 10 for LLM Applications 2025",
@@ -75888,12 +76801,20 @@
           "id": "SOC2-CC6-logical-access",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Logical and Physical Access Controls"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "attack_refs": [
         "T1059",
         "T1190",
-        "T1566"
+        "T1550",
+        "T1556",
+        "T1566",
+        "T1606"
       ],
       "rfc_refs": []
     }
@@ -82716,9 +83637,10 @@
       "sector-healthcare",
       "api-security",
       "cloud-security",
-      "age-gates-child-safety"
+      "age-gates-child-safety",
+      "vc-wallet-trust"
     ],
-    "skill_count": 6,
+    "skill_count": 7,
     "chain": {
       "atlas": [
         {
@@ -82750,8 +83672,11 @@
         "T1213",
         "T1505",
         "T1530",
+        "T1550",
         "T1552",
-        "T1567"
+        "T1556",
+        "T1567",
+        "T1606"
       ],
       "framework_gaps": [
         {
@@ -82769,6 +83694,11 @@
           "framework": "HITRUST CSF v11.4",
           "control_name": "Outsourced services management"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.16",
           "framework": "ISO/IEC 27001:2022",
@@ -82789,6 +83719,11 @@
           "framework": "ISO/IEC 42001:2023 (AI Management System)",
           "control_name": "AI risk assessment"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIST-800-218-SSDF",
           "framework": "NIST SP 800-218 (Secure Software Development Framework v1.1)",
@@ -82804,6 +83739,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Least Functionality"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-28",
           "framework": "NIST SP 800-53 Rev 5",
@@ -82814,6 +83754,11 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Boundary Protection"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "OWASP-ASVS-v5.0-V14",
           "framework": "OWASP ASVS v5.0",
@@ -82838,6 +83783,11 @@
           "id": "SOC2-CC9-vendor-management",
           "framework": "SOC 2 (AICPA Trust Services Criteria)",
           "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "d3fend": [
@@ -82918,19 +83868,24 @@
     "related_cves": [
       "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
       "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
+      "CVE-2022-1471",
       "CVE-2022-23812",
       "CVE-2022-36551",
       "CVE-2023-43472",
+      "CVE-2023-43654",
       "CVE-2023-43791",
       "CVE-2023-47117",
       "CVE-2023-48022",
       "CVE-2023-51449",
       "CVE-2023-6016",
+      "CVE-2023-6019",
+      "CVE-2023-6021",
       "CVE-2023-6038",
       "CVE-2023-6571",
       "CVE-2024-0132",
       "CVE-2024-12366",
       "CVE-2024-12450",
+      "CVE-2024-12776",
       "CVE-2024-1561",
       "CVE-2024-21575",
       "CVE-2024-21576",
@@ -82945,12 +83900,15 @@
       "CVE-2024-40635",
       "CVE-2024-42478",
       "CVE-2024-42479",
+      "CVE-2024-4889",
       "CVE-2024-5565",
+      "CVE-2024-6587",
       "CVE-2024-9526",
       "CVE-2025-0133",
       "CVE-2025-10164",
       "CVE-2025-1094",
       "CVE-2025-14847",
+      "CVE-2025-1796",
       "CVE-2025-22226",
       "CVE-2025-23266",
       "CVE-2025-25297",
@@ -82966,12 +83924,17 @@
       "CVE-2025-53767",
       "CVE-2025-53773",
       "CVE-2025-56520",
+      "CVE-2025-64513",
       "CVE-2025-68668",
+      "CVE-2025-69286",
       "CVE-2025-6965",
       "CVE-2026-21858",
       "CVE-2026-21877",
       "CVE-2026-22218",
       "CVE-2026-22219",
+      "CVE-2026-24206",
+      "CVE-2026-24207",
+      "CVE-2026-26190",
       "CVE-2026-3059",
       "CVE-2026-3060",
       "CVE-2026-30615",
@@ -87086,14 +88049,18 @@
     "name": "Operation on a Resource after Expiration or Release",
     "category": "Memory Safety",
     "referencing_skills": [
-      "kernel-lpe-triage"
+      "kernel-lpe-triage",
+      "vc-wallet-trust"
     ],
-    "skill_count": 1,
+    "skill_count": 2,
     "chain": {
       "atlas": [],
       "attack_refs": [
         "T1068",
-        "T1548.001"
+        "T1548.001",
+        "T1550",
+        "T1556",
+        "T1606"
       ],
       "framework_gaps": [
         {
@@ -87101,16 +88068,31 @@
           "framework": "CIS Controls v8",
           "control_name": "Continuous Vulnerability Management"
         },
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
         {
           "id": "ISO-27001-2022-A.8.8",
           "framework": "ISO/IEC 27001:2022",
           "control_name": "Management of technical vulnerabilities"
         },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
         {
           "id": "NIS2-Art21-patch-management",
           "framework": "EU NIS2 Directive",
           "control_name": "Vulnerability handling and disclosure"
         },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
         {
           "id": "NIST-800-53-SC-8",
           "framework": "NIST SP 800-53 Rev 5",
@@ -87121,10 +88103,20 @@
           "framework": "NIST SP 800-53 Rev 5",
           "control_name": "Flaw Remediation"
         },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
         {
           "id": "PCI-DSS-4.0-6.3.3",
           "framework": "PCI DSS 4.0",
           "control_name": "All system components are protected from known vulnerabilities by installing applicable security patches/updates"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
         }
       ],
       "d3fend": [
@@ -87235,8 +88227,10 @@
       "CVE-2023-41974",
       "CVE-2023-43000",
       "CVE-2023-43654",
+      "CVE-2023-43791",
       "CVE-2023-44467",
       "CVE-2023-44487",
+      "CVE-2023-47117",
       "CVE-2023-48022",
       "CVE-2023-50224",
       "CVE-2023-50387",
@@ -87255,6 +88249,7 @@
       "CVE-2024-11392",
       "CVE-2024-11393",
       "CVE-2024-11394",
+      "CVE-2024-12776",
       "CVE-2024-12987",
       "CVE-2024-13059",
       "CVE-2024-1561",
@@ -87302,6 +88297,7 @@
       "CVE-2025-1550",
       "CVE-2025-15556",
       "CVE-2025-1753",
+      "CVE-2025-1796",
       "CVE-2025-20281",
       "CVE-2025-20333",
       "CVE-2025-20337",
@@ -87439,6 +88435,7 @@
       "CVE-2025-68461",
       "CVE-2025-68613",
       "CVE-2025-68645",
+      "CVE-2025-69286",
       "CVE-2025-7775",
       "CVE-2025-8088",
       "CVE-2025-8110",
@@ -87516,6 +88513,8 @@
       "CVE-2026-40933",
       "CVE-2026-41091",
       "CVE-2026-41940",
+      "CVE-2026-41947",
+      "CVE-2026-41950",
       "CVE-2026-42897",
       "CVE-2026-42945",
       "CVE-2026-43284",
@@ -87529,7 +88528,8 @@
       "CVE-2026-5281",
       "CVE-2026-6973",
       "CVE-2026-9082",
-      "MAL-2026-3083"
+      "MAL-2026-3083",
+      "MAL-2026-NODE-IPC-STEALER"
     ]
   },
   "CWE-732": {
@@ -89261,9 +90261,10 @@
       "sector-financial",
       "api-security",
       "cloud-iam-incident",
-      "idp-incident-response"
+      "idp-incident-response",
+      "vc-wallet-trust"
     ],
-    "skill_count": 6,
+    "skill_count": 7,
     "chain": {
       "atlas": [
         {
@@ -89293,11 +90294,13 @@
         "T1486",
         "T1505",
         "T1538",
+        "T1550",
         "T1552.005",
         "T1556",
         "T1556.007",
         "T1567",
         "T1580",
+        "T1606",
         "T1606.002"
       ],
       "framework_gaps": [
@@ -89421,6 +90424,11 @@
           "framework": "SWIFT Customer Security Controls Framework v2026",
           "control_name": "SWIFT Environment Protection"
         },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        },
         {
           "id": "UK-CAF-B2-Cloud-IAM",
           "framework": "UK NCSC CAF (Cyber Assessment Framework) v3.x",
@@ -89518,11 +90526,19 @@
       ]
     },
     "related_cves": [
+      "CVE-2022-1471",
       "CVE-2022-23812",
       "CVE-2023-43472",
+      "CVE-2023-43654",
+      "CVE-2023-43791",
+      "CVE-2023-47117",
+      "CVE-2023-48022",
       "CVE-2023-6016",
+      "CVE-2023-6019",
+      "CVE-2023-6021",
       "CVE-2023-6571",
       "CVE-2024-12366",
+      "CVE-2024-12776",
       "CVE-2024-24590",
       "CVE-2024-24591",
       "CVE-2024-2912",
@@ -89530,11 +90546,14 @@
       "CVE-2024-31462",
       "CVE-2024-37052",
       "CVE-2024-37060",
+      "CVE-2024-4889",
       "CVE-2024-5565",
+      "CVE-2024-6587",
       "CVE-2024-9526",
       "CVE-2025-0133",
       "CVE-2025-10164",
       "CVE-2025-1094",
+      "CVE-2025-1796",
       "CVE-2025-27520",
       "CVE-2025-30066",
       "CVE-2025-30154",
@@ -89542,17 +90561,24 @@
       "CVE-2025-3466",
       "CVE-2025-51480",
       "CVE-2025-53773",
+      "CVE-2025-64513",
       "CVE-2025-68668",
+      "CVE-2025-69286",
       "CVE-2025-6965",
       "CVE-2026-21858",
       "CVE-2026-21877",
       "CVE-2026-22218",
+      "CVE-2026-24206",
+      "CVE-2026-24207",
+      "CVE-2026-26190",
       "CVE-2026-30615",
       "CVE-2026-30623",
       "CVE-2026-31229",
       "CVE-2026-31230",
       "CVE-2026-33017",
       "CVE-2026-39884",
+      "CVE-2026-41947",
+      "CVE-2026-41950",
       "CVE-2026-42208",
       "CVE-2026-45321",
       "CVE-2026-48027",
@@ -92012,16 +93038,68 @@
   "CWE-347": {
     "name": "Improper Verification of Cryptographic Signature",
     "category": "Cryptography",
-    "referencing_skills": [],
-    "skill_count": 0,
+    "referencing_skills": [
+      "vc-wallet-trust"
+    ],
+    "skill_count": 1,
     "chain": {
       "atlas": [],
-      "attack_refs": [],
-      "framework_gaps": [],
+      "attack_refs": [
+        "T1550",
+        "T1556",
+        "T1606"
+      ],
+      "framework_gaps": [
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        }
+      ],
       "d3fend": [],
       "rfc_refs": []
     },
-    "related_cves": []
+    "related_cves": [
+      "CVE-2022-1471",
+      "CVE-2023-43654",
+      "CVE-2023-43791",
+      "CVE-2023-47117",
+      "CVE-2023-48022",
+      "CVE-2023-6019",
+      "CVE-2023-6021",
+      "CVE-2024-12776",
+      "CVE-2024-4889",
+      "CVE-2024-6587",
+      "CVE-2025-1796",
+      "CVE-2025-64513",
+      "CVE-2025-69286",
+      "CVE-2026-24206",
+      "CVE-2026-24207",
+      "CVE-2026-26190",
+      "CVE-2026-41947",
+      "CVE-2026-41950",
+      "MAL-2026-NODE-IPC-STEALER"
+    ]
   },
   "CWE-476": {
     "name": "NULL Pointer Dereference",
@@ -92264,16 +93342,68 @@
   "CWE-290": {
     "name": "Authentication Bypass by Spoofing",
     "category": "Authentication",
-    "referencing_skills": [],
-    "skill_count": 0,
+    "referencing_skills": [
+      "vc-wallet-trust"
+    ],
+    "skill_count": 1,
     "chain": {
       "atlas": [],
-      "attack_refs": [],
-      "framework_gaps": [],
+      "attack_refs": [
+        "T1550",
+        "T1556",
+        "T1606"
+      ],
+      "framework_gaps": [
+        {
+          "id": "ISO-27001-2022-A.5.16-Federated",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Identity Management + Authentication Information — federated-state extension"
+        },
+        {
+          "id": "NIS2-Art-21-Federated-Identity",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Cryptography + Access Control — federated-identity extension"
+        },
+        {
+          "id": "NIST-800-53-IA-5-Federated",
+          "framework": "NIST 800-53 Rev.5",
+          "control_name": "Authenticator Management — federated-trust extension"
+        },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        }
+      ],
       "d3fend": [],
       "rfc_refs": []
     },
-    "related_cves": []
+    "related_cves": [
+      "CVE-2022-1471",
+      "CVE-2023-43654",
+      "CVE-2023-43791",
+      "CVE-2023-47117",
+      "CVE-2023-48022",
+      "CVE-2023-6019",
+      "CVE-2023-6021",
+      "CVE-2024-12776",
+      "CVE-2024-4889",
+      "CVE-2024-6587",
+      "CVE-2025-1796",
+      "CVE-2025-64513",
+      "CVE-2025-69286",
+      "CVE-2026-24206",
+      "CVE-2026-24207",
+      "CVE-2026-26190",
+      "CVE-2026-41947",
+      "CVE-2026-41950",
+      "MAL-2026-NODE-IPC-STEALER"
+    ]
   },
   "CWE-399": {
     "name": "Resource Management Errors (deprecated category)",