Every tracked finding that governed independent research or a vendor PSIRT confirmed before CISA KEV listed it — with evidence class, validation level, exposure, patch state, KEV status and full provenance. Nothing on this page reaches the ICHI score.
Actor claims, publisher reports, organisation confirmations and regulator notices, each with its evidence status, what each source actually supports, and a dated timeline. Allegations are attributed to whoever makes them. Observation only · not scored · never an alert.
Model supply-chain scan findings, AI-stack advisories, and reported AI incidents. Observation only · not scored.
Loading AI research…
Sources and methodology →
⚠
Observation only · not scored. A pre-KEV finding records that a governed source confirmed exploitability ahead of KEV listing; it is not a prediction that KEV will list it, and it never reaches computeCTI. Internet exposure is shown only where ICHI's own exposure telemetry confirms an exposed population — an edge product with unknown exposure is reported as unknown, never as exposed. See methodology →