@blamejs/exceptd-skills 0.19.0 → 0.19.2

package/data/d3fend-catalog.json

@@ -659,7 +659,7 @@
       "T1071.001",
       "T1041",
       "AML.T0096",
-      "AML.T0096.000",
+      "AML.T0096",
       "AML.T0051.001"
     ],
     "digital_artifacts_addressed": [
@@ -714,7 +714,7 @@
       "T1041",
       "AML.T0051",
       "AML.T0017",
-      "AML.T0017.001"
+      "AML.T0017"
     ],
     "digital_artifacts_addressed": [
       "Process",
@@ -1176,7 +1176,7 @@
     "counters_attack_techniques": [
       "T1055",
       "T1068",
-      "T1562",
+      "T1685",
       "T1106"
     ],
     "digital_artifacts_addressed": [
@@ -1214,7 +1214,7 @@
       "T1543",
       "T1547",
       "T1098",
-      "T1562.001"
+      "T1685"
     ],
     "digital_artifacts_addressed": [
       "System File",
@@ -1255,7 +1255,7 @@
       "T1505.003",
       "T1546.014",
       "AML.T0010",
-      "AML.T0019"
+      "AML.T0115.000"
     ],
     "digital_artifacts_addressed": [
       "Executable Binary",

package/data/dlp-controls.json

@@ -909,7 +909,7 @@
     ],
     "attack_techniques_addressed": [
       "T1070",
-      "T1562"
+      "T1685"
     ],
     "framework_controls_partially_mapping": [
       "NIST-800-53-AU-2",

package/data/framework-control-gaps.json

@@ -1304,7 +1304,7 @@
       "Treating 'Top 25 addressed' as a compliance signal creates a compliance-theatre risk for organisations with significant AI surface",
       "No cross-walk requirement to ATLAS TTPs — CWE addresses weaknesses; ATLAS addresses adversary techniques. Both are needed for AI coverage"
     ],
-    "real_requirement": "Programmes that claim 'Top 25 addressed' as compliance evidence must additionally: (1) enumerate AI-relevant CWEs outside the Top 25 (CWE-1426 Improper Output Validation, CWE-1039 Inadequate Detection of Adversarial Input, CWE-1230 Exposure of Sensitive Info Through Metadata) with explicit treatment, (2) cross-walk to ATLAS v2026.06 TTPs for adversarial coverage, (3) re-baseline against the next-published Top 25 with delta analysis. Aligns with EU CRA Annex I, UK NCSC, AU ISM, ISO 27001 A.8.28.",
+    "real_requirement": "Programmes that claim 'Top 25 addressed' as compliance evidence must additionally: (1) enumerate AI-relevant CWEs outside the Top 25 (CWE-1426 Improper Output Validation, CWE-1039 Inadequate Detection of Adversarial Input, CWE-1230 Exposure of Sensitive Info Through Metadata) with explicit treatment, (2) cross-walk to ATLAS v2026.07 TTPs for adversarial coverage, (3) re-baseline against the next-published Top 25 with delta analysis. Aligns with EU CRA Annex I, UK NCSC, AU ISM, ISO 27001 A.8.28.",
     "status": "open",
     "opened_date": "2026-05-11",
     "evidence_cves": [],
@@ -2055,7 +2055,7 @@
     ],
     "attack_refs": [
       "T0883",
-      "T0855",
+      "T1692.001",
       "T1071"
     ],
     "theater_test": {
@@ -3128,7 +3128,7 @@
       "LLM-API-as-C2 (SesameOp pattern, ATLAS AML.T0096) is not in the clause 6.1.2 example threat list — risk register templates omit it",
       "No requirement to link AI risk register entries to specific TTP IDs (ATLAS / ATT&CK) — risks remain framework-internal abstractions"
     ],
-    "real_requirement": "Clause 6.1.2 risk registers must (1) ingest ATLAS v2026.06 TTPs as enumerated AI-specific threat sources, (2) cross-reference jurisdictional obligations (EU AI Act Annex III, NIS2 Art. 21, DORA Art. 28, UK CAF B4, AU ISM AI annex, ISO 27001:2022 A.5.7), (3) include AI-API-as-C2 and prompt-injection-as-RCE as named scenarios, (4) be re-run on threat-intel triggers, not only on calendar cycles.",
+    "real_requirement": "Clause 6.1.2 risk registers must (1) ingest ATLAS v2026.07 TTPs as enumerated AI-specific threat sources, (2) cross-reference jurisdictional obligations (EU AI Act Annex III, NIS2 Art. 21, DORA Art. 28, UK CAF B4, AU ISM AI annex, ISO 27001:2022 A.5.7), (3) include AI-API-as-C2 and prompt-injection-as-RCE as named scenarios, (4) be re-run on threat-intel triggers, not only on calendar cycles.",
     "status": "open",
     "opened_date": "2026-05-11",
     "evidence_cves": [],
@@ -3176,7 +3176,7 @@
     ],
     "attack_refs": [
       "T0883",
-      "T0855",
+      "T1692.001",
       "T1071"
     ],
     "theater_test": {
@@ -5402,7 +5402,7 @@
     ],
     "attack_refs": [
       "T0883",
-      "T0855",
+      "T1692.001",
       "T1071"
     ],
     "theater_test": {
@@ -7419,7 +7419,7 @@
     "attack_refs": [
       "T1078.004",
       "T1098.001",
-      "T1562.008"
+      "T1685.002"
     ],
     "theater_test": {
       "claim": "Our cloud posture is monitored end-to-end by AWS Security Hub (or equivalent CSP-native posture tool).",
@@ -10671,7 +10671,7 @@
     "attack_refs": [
       "T1059",
       "T1554",
-      "T1562.001"
+      "T1685"
     ],
     "theater_test": {
       "claim": "We protect all in-scope systems from malicious software per PCI DSS 5.1.",
@@ -11302,7 +11302,7 @@
     }
   },
   "ATLAS-AML.T0048": {
-    "framework": "MITRE ATLAS v2026.06",
+    "framework": "MITRE ATLAS v2026.07",
     "control_id": "AML.T0048",
     "control_name": "External Harms — ML Supply Chain Compromise (bundled-codec / inference-server class)",
     "designed_for": "ATLAS AML.T0048 catalogues external harms from ML supply-chain compromise, including malicious model weights, poisoned training data, and compromised ML libraries. The technique-level guidance covers detection and mitigation at the model-artifact and library-consumption layer.",

package/data/playbooks/audit-log-integrity.json

@@ -44,7 +44,7 @@
     "attack_refs": [
       "T1070",
       "T1565.001",
-      "T1562.008"
+      "T1685.002"
     ],
     "cve_refs": [],
     "cwe_refs": [
@@ -320,7 +320,7 @@
           "description": "Unwitnessed, unaudited break-glass access is the standing path to disable logging or tamper with the audit trail with legitimate-looking privilege.",
           "confidence": "medium",
           "deterministic": false,
-          "attack_ref": "T1562.008",
+          "attack_ref": "T1685.002",
           "false_positive_checks_required": [
             "Confirm break-glass requires dual control (or at minimum independent approval) AND every use raises an immediate audited alert to a separate party — single-actor, unalerted break-glass is the finding.",
             "A system with no privileged break-glass mechanism has no such path; not in scope."

package/data/playbooks/hardening.json

@@ -555,7 +555,7 @@
           "description": "Skeletal audit ruleset means none of the catalogued kernel LPE chains (sudoers tampering, execve under attacker-controlled paths, /etc/shadow read) leave a trail. Detection coverage for the very anti-patterns this playbook enumerates is missing.",
           "confidence": "high",
           "deterministic": false,
-          "attack_ref": "T1562.006"
+          "attack_ref": "T1685"
         },
         {
           "id": "umask-permissive",

package/data/zeroday-lessons.json

@@ -159,7 +159,7 @@
       "MITRE-ATLAS-v5.1.0": {
         "covered": true,
         "adequate": "reference only",
-        "gap": "ATLAS documents the technique (AML.T0051/T0054) but no framework has implemented controls based on ATLAS"
+        "gap": "ATLAS documents the technique (AML.T0051/AML.T0054) but no framework has implemented controls based on ATLAS"
       }
     },
     "new_control_requirements": [
@@ -11173,7 +11173,7 @@
     "name": "Microsoft Defender Remote Denial of Service (Antimalware Platform)",
     "lesson_date": "2026-05-24",
     "attack_vector": {
-      "description": "Uncontrolled resource consumption (CWE-400) in the Microsoft Defender antimalware platform, reachable over the network without authentication, lets an attacker crash or hang Defender — remotely removing the host's AV/EDR coverage (defense impairment, ATT&CK T1562.001).",
+      "description": "Uncontrolled resource consumption (CWE-400) in the Microsoft Defender antimalware platform, reachable over the network without authentication, lets an attacker crash or hang Defender — remotely removing the host's AV/EDR coverage (defense impairment, ATT&CK T1685).",
       "privileges_required": "none — remote, unauthenticated (NVD AV:N / PR:N)",
       "complexity": "low (NVD AC:L); availability-only (C:N/I:N/A:H)",
       "ai_factor": "Not AI-discovered. The lesson: AV/EDR availability is itself a control, and its remote loss is a security event, not just an outage — a disable-able defender is an intrusion enabler. Surfaced by the CISA-KEV poller after the v0.13.17 bulk intake."

package/manifest-snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "Auto-generated by scripts/refresh-manifest-snapshot.js — do not hand-edit. Public skill surface used by check-manifest-snapshot.js to detect breaking removals.",
-  "_generated_at": "2026-08-07T01:15:16.284Z",
-  "atlas_version": "2026.06",
+  "_generated_at": "2026-08-08T05:54:00.345Z",
+  "atlas_version": "2026.07",
   "skill_count": 51,
   "skills": [
     {
@@ -413,8 +413,8 @@
       "atlas_refs": [],
       "attack_refs": [
         "T1070",
-        "T1562.008",
-        "T1565.001"
+        "T1565.001",
+        "T1685.002"
       ],
       "framework_gaps": [
         "ISO-27001-2022-A.8.15",
@@ -1767,10 +1767,10 @@
         "AML.T0010"
       ],
       "attack_refs": [
-        "T0855",
         "T0883",
         "T1068",
-        "T1190"
+        "T1190",
+        "T1692.001"
       ],
       "framework_gaps": [
         "AU-Essential-8-App-Hardening",
@@ -2101,10 +2101,10 @@
       ],
       "atlas_refs": [],
       "attack_refs": [
-        "T0855",
         "T0883",
         "T1078",
-        "T1190"
+        "T1190",
+        "T1692.001"
       ],
       "framework_gaps": [
         "AU-Essential-8-Backup",

package/manifest-snapshot.sha256

@@ -1 +1 @@
-6e9e98ec4fdb230cabdb7493dd35490de7e8f20cbc840886e339cfa1bf7507e2  manifest-snapshot.json
+25b50cb9f37919485e01a0ad8a4454dd69c24d3988c87b0406cdbfb27de7f02b  manifest-snapshot.json