CASI Leaderboard Shifts: Sugar-Coated Poison, and the Expanding AI Attack Surface
ATT&CK techniques detected
T1190Exploit Public-Facing Application
84%
"reference : orca security research ( feb 19, 2026 ) this exploit targets the data - retrieval phase of ai agents. by placing a hidden " instructional block " inside a standard github issue, an attacker can compromise any developer using copilot to summarize or debug that issue. i…"
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
Summary
AI Security Insights – March 2026