Разборы инцидентов:

1. Hugging Face — Anatomy of a Frontier Lab Agent Intrusion (технический разбор): https://huggingface.co/blog/agent-intrusion-technical-timeline
2. Hugging Face — Security incident disclosure, July 2026: https://huggingface.co/blog/security-incident-july-2026
3. OpenAI — Hugging Face incident and the road ahead: https://openai.com/index/hugging-face-incident-and-the-road-ahead/
4. Ironclad — «The AI agents never broke in. They logged in» (через Stacker/KRDO): https://krdo.com/stacker-ai/2026/10/22/the-ai-agents-never-broke-in-they-logged-in/
5. Cloud Security Alliance — When AI Agents Attack: The OpenAI–Hugging Face Intrusion: https://labs.cloudsecurityalliance.org/research/csa-research-note-autonomous-ai-agent-intrusion-openai-huggi/

Отчёты об угрозах:

1. Anthropic — Disrupting the first reported AI-orchestrated cyber espionage campaign (GTG-1002): https://www.anthropic.com/news/disrupting-AI-espionage (обзор: https://thehackernews.com/2025/11/chinese-hackers-use-anthropics-ai-to.html)
2. Google GTIG — AI-enabled malware: PROMPTFLUX, PROMPTSTEAL (The Register): https://www.theregister.com/2025/11/05/attackers_experiment_with_gemini_ai/
3. The Hacker News — Autonomous AI Agents Compromise Thousands of Credentials (GTIG), сент. 2026: https://thehackernews.com/2026/09/autonomous-ai-agents-compromise.html
4. Tenable — The Agentic AI threat cluster: https://www.tenable.com/blog/the-agentic-ai-threat-cluster-seven-incidents-three-actors-and-what-they-mean

Фреймворки и руководства:

1. Google — An Introduction to Google’s Approach for Secure AI Agents: https://research.google/pubs/an-introduction-to-googles-approach-for-secure-ai-agents/
2. Google Cloud — BeyondProd: https://docs.cloud.google.com/docs/security/beyondprod
3. Microsoft — Threat Matrix for Kubernetes (v3): https://microsoft.com/en-us/security/blog/2022/12/07/mitigate-threats-with-the-new-threat-matrix-for-kubernetes
4. AWS — EKS Pod Identity: https://docs.aws.amazon.com/eks/latest/userguide/pod-identities.html
5. NSA/CISA — Kubernetes Hardening Guidance (разбор на kubernetes.io): https://www.kubernetes.io/blog/2021/10/05/nsa-cisa-kubernetes-hardening-guidance/
6. OWASP — Top 10 for Agentic Applications 2026: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026