{
  "ml": {
    "l": -1,
    "v": "6",
    "fs": [
      {
        "l": -1,
        "id": 0,
        "prob": 0.00016832351684570312
      }
    ],
    "prob": 0.00016832352,
    "models": [
      {
        "m": "az",
        "raw": 0.00016832352,
        "prob": 0.00016832352,
        "class": 0
      },
      {
        "m": "az/scripts",
        "raw": 0.000049352646,
        "prob": 0.000049352646,
        "class": 0
      },
      {
        "m": "az/python",
        "raw": 0.000052839518,
        "prob": 0.000052839518,
        "class": 0
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-06-09T11:30:07Z"
  },
  "path": "_10_summary.py",
  "raw": {
    "v": "6",
    "fs": [
      {
        "f": "O(As)H(Db)",
        "x": 3,
        "ff": {
          "i": [
            [
              "",
              "render_header_block"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.columns"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "st.button"
            ],
            [
              "",
              "nav_to"
            ],
            [
              "",
              "st.rerun"
            ],
            [
              "",
              "st.markdown"
            ],
            [
              "",
              "render_callout"
            ],
            [
              "",
              "register_page"
            ]
          ],
          "m": {
            "ast": {
              "max_depth": 15.0,
              "bind_count": 2.0,
              "call_count": 21.0,
              "node_count": 1605.0,
              "member_count": 4.0,
              "identifier_count": 27.0,
              "member_depth_max": 2.0,
              "string_literal_count": 259.0,
              "array_literal_max_length": 5.0,
              "numeric_array_max_length": 2.0
            },
            "file": {
              "size": 22493.0,
              "entropy": 5.11,
              "size_bytes": 22493.0
            },
            "text": {
              "digit_ratio": 0.05,
              "space_count": 3897.0,
              "total_lines": 284.0,
              "char_entropy": 5.11,
              "unique_chars": 91.0,
              "lines_over_200": 3.0,
              "string_density": 0.91,
              "ascii_art_lines": 2.0,
              "avg_line_length": 78.2,
              "high_byte_ratio": 0.05,
              "max_line_length": 232.0,
              "non_ascii_ratio": 0.05,
              "empty_line_ratio": 0.08,
              "last_line_length": 61.0,
              "long_token_count": 7.0,
              "whitespace_ratio": 0.19,
              "most_common_ratio": 0.06,
              "identifier_density": 0.3,
              "line_length_stddev": 46.46,
              "normalized_string_count": 15.37,
              "repeated_char_sequences": 40.0,
              "suspicious_string_ratio": 0.03,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "most_common_char_codepoint": 101.0,
              "normalized_unique_identifiers": 3.31
            },
            "binds": {
              "count": 2.0
            },
            "calls": {
              "count": 21.0
            },
            "binary": {
              "overall_entropy": 5.11
            },
            "source": {
              "function_count": 1.0
            },
            "members": {
              "count": 4.0
            },
            "strings": {
              "total": 259.0,
              "avg_length": 66.34,
              "max_length": 168.0,
              "path_count": 1.0,
              "avg_entropy": 4.1,
              "sql_strings": 6.0,
              "total_bytes": 17183.0,
              "entropy_stddev": 0.83,
              "high_entropy_count": 9.0,
              "embedded_code_candidates": 2.0
            },
            "comments": {
              "chars": 1346.0,
              "lines": 9.0,
              "total": 9.0,
              "to_code_ratio": 0.03
            },
            "functions": {
              "count": 1.0,
              "over_100_lines": 1.0,
              "avg_name_length": 14.0,
              "no_params_count": 1.0,
              "avg_length_lines": 277.0,
              "max_length_lines": 277.0,
              "min_length_lines": 277.0,
              "density_per_100_lines": 0.35,
              "code_in_functions_ratio": 0.98
            },
            "identifiers": {
              "count": 27.0,
              "total": 86.0,
              "avg_length": 8.22,
              "max_length": 19.0,
              "min_length": 2.0,
              "avg_entropy": 2.55,
              "reuse_ratio": 0.31,
              "unique_count": 27.0,
              "length_stddev": 4.6,
              "high_entropy_count": 2.0,
              "high_entropy_ratio": 0.07,
              "all_lowercase_ratio": 0.93,
              "all_uppercase_ratio": 0.07,
              "underscore_prefix_count": 3.0
            }
          },
          "s": [
            [
              392,
              "u8",
              "Databricks Apps -- Security Assessment"
            ],
            [
              393,
              "u8",
              "Databricks Apps -- Security Assessment"
            ],
            [
              442,
              "u8",
              "Architecture review, attack surface analysis, exploit chain validation, and policy '\n        'recommendations for production wor"
            ],
            [
              442,
              "u8",
              "Architecture review, attack surface analysis, exploit chain validation, and policy "
            ],
            [
              443,
              "u8",
              "Architecture review, attack surface analysis, exploit chain validation, and policy "
            ],
            [
              536,
              "u8",
              "recommendations for production workspaces with PHI access.\u003cbr\u003e"
            ],
            [
              537,
              "u8",
              "recommendations for production workspaces with PHI access.\u003cbr\u003e"
            ],
            [
              609,
              "u8",
              "\u003cspan style=\"font-size:12px;color:#6b7280\"\u003e"
            ],
            [
              610,
              "u8",
              "\u003cspan style=\"font-size:12px;color:#6b7280\"\u003e"
            ],
            [
              663,
              "u8",
              "Source: \u003ca href=\"https://github.com/AndrewAltimit/exploits\" style=\"color:#2563eb\"\u003e"
            ],
            [
              664,
              "u8",
              "Source: \u003ca href=\"https://github.com/AndrewAltimit/exploits\" style=\"color:#2563eb\"\u003e"
            ],
            [
              756,
              "u8",
              "github.com/AndrewAltimit/exploits\u003c/a\u003e\u003c/span\u003e"
            ],
            [
              757,
              "u8",
              "github.com/AndrewAltimit/exploits\u003c/a\u003e\u003c/span\u003e"
            ],
            [
              818,
              "u8",
              "border-color:#e5e7eb;border-width:2px"
            ],
            [
              819,
              "u8",
              "border-color:#e5e7eb;border-width:2px"
            ],
            [
              1068,
              "u8",
              "\u003cdiv style=\"padding:12px 16px;background:#f0fdf4;border:1px solid #bbf7d0;border-radius:6px;'\n        'font-size:12px;color:#166"
            ],
            [
              1068,
              "u8",
              "\u003cdiv style=\"padding:12px 16px;background:#f0fdf4;border:1px solid #bbf7d0;border-radius:6px;"
            ],
            [
              1069,
              "u8",
              "\u003cdiv style=\"padding:12px 16px;background:#f0fdf4;border:1px solid #bbf7d0;border-radius:6px;"
            ],
            [
              1171,
              "u8",
              "font-size:12px;color:#166534;line-height:1.6;margin-bottom:16px\"\u003e"
            ],
            [
              1172,
              "u8",
              "font-size:12px;color:#166534;line-height:1.6;margin-bottom:16px\"\u003e"
            ],
            [
              1247,
              "u8",
              "\u003cb\u003ePurpose of this assessment:\u003c/b\u003e This dashboard was built as a red-team exercise to "
            ],
            [
              1248,
              "u8",
              "\u003cb\u003ePurpose of this assessment:\u003c/b\u003e This dashboard was built as a red-team exercise to "
            ],
            [
              1344,
              "u8",
              "demonstrate the worst-case scenario if production Databricks Apps are deployed without "
            ],
            [
              1345,
              "u8",
              "demonstrate the worst-case scenario if production Databricks Apps are deployed without "
            ],
            [
              1442,
              "u8",
              "human-in-the-loop code review. The exploit chains, attack scenarios, and proof-of-concept "
            ],
            [
              1443,
              "u8",
              "human-in-the-loop code review. The exploit chains, attack scenarios, and proof-of-concept "
            ],
            [
              1543,
              "u8",
              "tools shown here illustrate what an adversary \u003ci\u003ecould\u003c/i\u003e do - not what has occurred "
            ],
            [
              1544,
              "u8",
              "tools shown here illustrate what an adversary \u003ci\u003ecould\u003c/i\u003e do - not what has occurred "
            ],
            [
              1640,
              "u8",
              "in our environment. The goal is to build organizational support for mandatory code review "
            ],
            [
              1641,
              "u8",
              "in our environment. The goal is to build organizational support for mandatory code review "
            ],
            [
              1741,
              "u8",
              "gates and security governance before apps reach production. All exploit code targets "
            ],
            [
              1742,
              "u8",
              "gates and security governance before apps reach production. All exploit code targets "
            ],
            [
              1837,
              "u8",
              "publicly disclosed, patched CVEs. All lab experiments are non-destructive and use mock "
            ],
            [
              1838,
              "u8",
              "publicly disclosed, patched CVEs. All lab experiments are non-destructive and use mock "
            ],
            [
              1935,
              "u8",
              "data outside approved sandboxes. No vendor systems were tested without authorization."
            ],
            [
              1936,
              "u8",
              "data outside approved sandboxes. No vendor systems were tested without authorization."
            ],
            [
              2031,
              "u8",
              "\u003c/div\u003e"
            ],
            [
              2032,
              "u8",
              "\u003c/div\u003e"
            ],
            [
              2091,
              "u8",
              "\u003cdiv style=\"padding:12px 16px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:6px;'\n        'font-size:12px;color:#1e4"
            ],
            [
              2091,
              "u8",
              "\u003cdiv style=\"padding:12px 16px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:6px;"
            ],
            [
              2092,
              "u8",
              "\u003cdiv style=\"padding:12px 16px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:6px;"
            ],
            [
              2194,
              "u8",
              "font-size:12px;color:#1e40af;line-height:1.6;margin-bottom:16px\"\u003e"
            ],
            [
              2195,
              "u8",
              "font-size:12px;color:#1e40af;line-height:1.6;margin-bottom:16px\"\u003e"
            ],
            [
              2270,
              "u8",
              "\u003cb\u003eShared responsibility model:\u003c/b\u003e This assessment evaluates our organization\\'s governance "
            ],
            [
              2271,
              "u8",
              "\u003cb\u003eShared responsibility model:\u003c/b\u003e This assessment evaluates our organization\\'s governance "
            ],
            [
              2374,
              "u8",
              "posture around Databricks Apps deployment. Databricks provides robust security controls "
            ],
            [
              2375,
              "u8",
              "posture around Databricks Apps deployment. Databricks provides robust security controls "
            ],
            [
              2473,
              "u8",
              "including Databricks Asset Bundles (DABs), Unity Catalog, and Network Connectivity Controls. "
            ],
            [
              2474,
              "u8",
              "including Databricks Asset Bundles (DABs), Unity Catalog, and Network Connectivity Controls. "
            ],
            [
              2577,
              "u8",
              "The findings here reflect gaps in \u003ci\u003eour adoption\u003c/i\u003e of these controls, not deficiencies in "
            ],
            [
              2578,
              "u8",
              "The findings here reflect gaps in \u003ci\u003eour adoption\u003c/i\u003e of these controls, not deficiencies in "
            ],
            [
              2681,
              "u8",
              "the platform itself. Every recommendation in this report can be implemented using Databricks\\' "
            ],
            [
              2682,
              "u8",
              "the platform itself. Every recommendation in this report can be implemented using Databricks\\' "
            ],
            [
              2787,
              "u8",
              "native tooling."
            ],
            [
              2788,
              "u8",
              "native tooling."
            ],
            [
              2813,
              "u8",
              "\u003c/div\u003e"
            ],
            [
              2814,
              "u8",
              "\u003c/div\u003e"
            ],
            [
              3069,
              "u8",
              "\u003ctable style=\"width:100%;border-collapse:collapse;font-size:13px;margin-bottom:16px\"\u003e'\n        '\u003ctr style=\"border-bottom:2px sol"
            ],
            [
              3069,
              "u8",
              "\u003ctable style=\"width:100%;border-collapse:collapse;font-size:13px;margin-bottom:16px\"\u003e"
            ],
            [
              3070,
              "u8",
              "\u003ctable style=\"width:100%;border-collapse:collapse;font-size:13px;margin-bottom:16px\"\u003e"
            ],
            [
              3165,
              "u8",
              "\u003ctr style=\"border-bottom:2px solid #e5e7eb\"\u003e"
            ],
            [
              3166,
              "u8",
              "\u003ctr style=\"border-bottom:2px solid #e5e7eb\"\u003e"
            ],
            [
              3220,
              "u8",
              "\u003cth style=\"text-align:left;padding:10px 14px;font-size:11px;text-transform:uppercase;"
            ],
            [
              3221,
              "u8",
              "\u003cth style=\"text-align:left;padding:10px 14px;font-size:11px;text-transform:uppercase;"
            ],
            [
              3316,
              "u8",
              "letter-spacing:.05em;color:#6b7280;width:40%\"\u003eFinding\u003c/th\u003e"
            ],
            [
              3317,
              "u8",
              "letter-spacing:.05em;color:#6b7280;width:40%\"\u003eFinding\u003c/th\u003e"
            ],
            [
              3385,
              "u8",
              "\u003cth style=\"text-align:left;padding:10px 14px;font-size:11px;text-transform:uppercase;"
            ],
            [
              3386,
              "u8",
              "\u003cth style=\"text-align:left;padding:10px 14px;font-size:11px;text-transform:uppercase;"
            ],
            [
              3481,
              "u8",
              "letter-spacing:.05em;color:#6b7280\"\u003eDetail\u003c/th\u003e\u003c/tr\u003e"
            ],
            [
              3482,
              "u8",
              "letter-spacing:.05em;color:#6b7280\"\u003eDetail\u003c/th\u003e\u003c/tr\u003e"
            ],
            [
              3544,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              3545,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              3599,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eNo approval gate enforced by default\u003c/td\u003e"
            ],
            [
              3600,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eNo approval gate enforced by default\u003c/td\u003e"
            ],
            [
              3711,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eIn the default configuration, any workspace user can create, deploy, and expose a "
            ],
            [
              3712,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eIn the default configuration, any workspace user can create, deploy, and expose a "
            ],
            [
              3848,
              "u8",
              "Databricks App with data access. Databricks provides Databricks Asset Bundles (DABs) for CI/CD gating, but no approval workflow "
            ],
            [
              3849,
              "u8",
              "Databricks App with data access. Databricks provides Databricks Asset Bundles (DABs) for CI/CD gating, but no approval workflow "
            ],
            [
              4020,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              4021,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              4075,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eFull renderer code execution achieved\u003c/td\u003e"
            ],
            [
              4076,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eFull renderer code execution achieved\u003c/td\u003e"
            ],
            [
              4188,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eCVE-2024-5830 (Chrome 125) -- a browser engine vulnerability "
            ],
            [
              4189,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eCVE-2024-5830 (Chrome 125) -- a browser engine vulnerability "
            ],
            [
              4304,
              "u8",
              "allowed arbitrary code execution on the user\\'s workstation with no interaction required.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              4305,
              "u8",
              "allowed arbitrary code execution on the user\\'s workstation with no interaction required.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              4414,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              4415,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              4469,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003e30+ browser CVEs cataloged \u0026amp; validated\u003c/td\u003e"
            ],
            [
              4470,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003e30+ browser CVEs cataloged \u0026amp; validated\u003c/td\u003e"
            ],
            [
              4587,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003e15 with working exploit code (5 achieving arbitrary "
            ],
            [
              4588,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003e15 with working exploit code (5 achieving arbitrary "
            ],
            [
              4694,
              "u8",
              "code execution), spanning Chrome and Firefox 2024-2026.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              4695,
              "u8",
              "code execution), spanning Chrome and Firefox 2024-2026.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              4770,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              4771,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              4825,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#92400e\"\u003eReliable browser exploit on stock Chrome 144\u003c/td\u003e"
            ],
            [
              4826,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#92400e\"\u003eReliable browser exploit on stock Chrome 144\u003c/td\u003e"
            ],
            [
              4945,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eCVE-2026-2441 -- 97% reliable exploitation (62 of 64 attempts successful) "
            ],
            [
              4946,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eCVE-2026-2441 -- 97% reliable exploitation (62 of 64 attempts successful) "
            ],
            [
              5074,
              "u8",
              "on an unmodified browser, zero user interaction required. Listed on CISA Known Exploited Vulnerabilities catalog.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              5075,
              "u8",
              "on an unmodified browser, zero user interaction required. Listed on CISA Known Exploited Vulnerabilities catalog.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              5208,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              5209,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              5263,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#92400e\"\u003ePost-exploitation lateral movement demonstrated\u003c/td\u003e"
            ],
            [
              5264,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#92400e\"\u003ePost-exploitation lateral movement demonstrated\u003c/td\u003e"
            ],
            [
              5386,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eProof-of-concept demonstrating "
            ],
            [
              5387,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eProof-of-concept demonstrating "
            ],
            [
              5472,
              "u8",
              "credential reuse, persistence, and app-to-app propagation using harvested service principal credentials.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              5473,
              "u8",
              "credential reuse, persistence, and app-to-app propagation using harvested service principal credentials.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              5597,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              5598,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              5652,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eStructured attack campaigns are feasible, not theoretical\u003c/td\u003e"
            ],
            [
              5653,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eStructured attack campaigns are feasible, not theoretical\u003c/td\u003e"
            ],
            [
              5785,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eWe demonstrated that browser exploits can be orchestrated into "
            ],
            [
              5786,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eWe demonstrated that browser exploits can be orchestrated into "
            ],
            [
              5903,
              "u8",
              "repeatable, automated attack campaigns \u0026mdash; with target validation before exploit delivery, automated exploit "
            ],
            [
              5904,
              "u8",
              "repeatable, automated attack campaigns \u0026mdash; with target validation before exploit delivery, automated exploit "
            ],
            [
              6027,
              "u8",
              "selection based on browser version, and multi-stage payload staging. This represents a step change from "
            ],
            [
              6028,
              "u8",
              "selection based on browser version, and multi-stage payload staging. This represents a step change from "
            ],
            [
              6142,
              "u8",
              "individual vulnerability triggers \u0026mdash; structured campaigns that were historically resource-intensive "
            ],
            [
              6143,
              "u8",
              "individual vulnerability triggers \u0026mdash; structured campaigns that were historically resource-intensive "
            ],
            [
              6258,
              "u8",
              "are now accessible with AI-assisted development tools.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              6259,
              "u8",
              "are now accessible with AI-assisted development tools.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              6333,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              6334,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              6388,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eFull post-compromise infrastructure demonstrated\u003c/td\u003e"
            ],
            [
              6389,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eFull post-compromise infrastructure demonstrated\u003c/td\u003e"
            ],
            [
              6512,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eModular implant staging (the exploit, the persistence mechanism, and "
            ],
            [
              6513,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eModular implant staging (the exploit, the persistence mechanism, and "
            ],
            [
              6636,
              "u8",
              "the payload are independent \u0026mdash; patching one does not disrupt the others), covert command channels that mimic "
            ],
            [
              6637,
              "u8",
              "the payload are independent \u0026mdash; patching one does not disrupt the others), covert command channels that mimic "
            ],
            [
              6761,
              "u8",
              "legitimate platform traffic, centralized management of compromised sessions at scale, and counter-forensics "
            ],
            [
              6762,
              "u8",
              "legitimate platform traffic, centralized management of compromised sessions at scale, and counter-forensics "
            ],
            [
              6880,
              "u8",
              "capabilities that defeat incident response timelines.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              6881,
              "u8",
              "capabilities that defeat incident response timelines.\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              6954,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              6955,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e"
            ],
            [
              7009,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003e20+ platform attack vectors across 3 dedicated dashboards\u003c/td\u003e"
            ],
            [
              7010,
              "u8",
              "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003e20+ platform attack vectors across 3 dedicated dashboards\u003c/td\u003e"
            ],
            [
              7142,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003ePlatform Attack Surface (10 vectors), Advanced Platform Risks "
            ],
            [
              7143,
              "u8",
              "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003ePlatform Attack Surface (10 vectors), Advanced Platform Risks "
            ],
            [
              7259,
              "u8",
              "(secrets, agentic AI, marketplace supply chain, webhooks, compute gaps), and Known Platform CVEs "
            ],
            [
              7260,
              "u8",
              "(secrets, agentic AI, marketplace supply chain, webhooks, compute gaps), and Known Platform CVEs "
            ],
            [
              7367,
              "u8",
              "(CVE-2026-33107 CVSS 10.0, CVE-2025-53763 CVSS 9.8, CVE-2024-49194, MLflow CVEs, and 3 additional vendor disclosures).\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              7368,
              "u8",
              "(CVE-2026-33107 CVSS 10.0, CVE-2025-53763 CVSS 9.8, CVE-2024-49194, MLflow CVEs, and 3 additional vendor disclosures).\u003c/td\u003e\u003c/tr\u003e"
            ],
            [
              7506,
              "u8",
              "\u003c/table\u003e"
            ],
            [
              7507,
              "u8",
              "\u003c/table\u003e"
            ],
            [
              7715,
              "u8",
              "\u003cdiv class=\"section-lbl\"\u003eWhy This Assessment Exists: AI-Accelerated CVE Discovery\u003c/div\u003e"
            ],
            [
              7716,
              "u8",
              "\u003cdiv class=\"section-lbl\"\u003eWhy This Assessment Exists: AI-Accelerated CVE Discovery\u003c/div\u003e"
            ],
            [
              7855,
              "u8",
              "\u003cdiv style=\"padding:16px 18px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;'\n        'font-size:13px;color:#1e4"
            ],
            [
              7855,
              "u8",
              "\u003cdiv style=\"padding:16px 18px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;"
            ],
            [
              7856,
              "u8",
              "\u003cdiv style=\"padding:16px 18px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;"
            ],
            [
              7958,
              "u8",
              "font-size:13px;color:#1e40af;line-height:1.7;margin:12px 0\"\u003e"
            ],
            [
              7959,
              "u8",
              "font-size:13px;color:#1e40af;line-height:1.7;margin:12px 0\"\u003e"
            ],
            [
              8029,
              "u8",
              "\u003cdiv style=\"font-weight:700;font-size:14px;margin-bottom:10px;color:#1e3a8a\"\u003e"
            ],
            [
              8030,
              "u8",
              "\u003cdiv style=\"font-weight:700;font-size:14px;margin-bottom:10px;color:#1e3a8a\"\u003e"
            ],
            [
              8117,
              "u8",
              "Internal security research drives this assessment\u003c/div\u003e"
            ],
            [
              8118,
              "u8",
              "Internal security research drives this assessment\u003c/div\u003e"
            ],
            [
              8183,
              "u8",
              "This dashboard is not a theoretical exercise. It is grounded in our own vulnerability "
            ],
            [
              8184,
              "u8",
              "This dashboard is not a theoretical exercise. It is grounded in our own vulnerability "
            ],
            [
              8280,
              "u8",
              "research program, which uses AI-assisted closed-loop systems to discover, analyze, and "
            ],
            [
              8281,
              "u8",
              "research program, which uses AI-assisted closed-loop systems to discover, analyze, and "
            ],
            [
              8378,
              "u8",
              "validate browser CVEs at a pace that was not possible two years ago. Key findings from "
            ],
            [
              8379,
              "u8",
              "validate browser CVEs at a pace that was not possible two years ago. Key findings from "
            ],
            [
              8476,
              "u8",
              "that program:"
            ],
            [
              8477,
              "u8",
              "that program:"
            ],
            [
              8500,
              "u8",
              "\u003cul style=\"margin:10px 0;padding-left:20px;color:#1e40af\"\u003e"
            ],
            [
              8501,
              "u8",
              "\u003cul style=\"margin:10px 0;padding-left:20px;color:#1e40af\"\u003e"
            ],
            [
              8569,
              "u8",
              "\u003cli\u003e\u003cb\u003e17 CVEs reproduced\u003c/b\u003e across Chrome and Firefox (2024\u0026ndash;2026), with 13 achieving "
            ],
            [
              8570,
              "u8",
              "\u003cli\u003e\u003cb\u003e17 CVEs reproduced\u003c/b\u003e across Chrome and Firefox (2024\u0026ndash;2026), with 13 achieving "
            ],
            [
              8673,
              "u8",
              "working exploitation \u0026mdash; from type confusion triggers through full arbitrary code execution.\u003c/li\u003e"
            ],
            [
              8674,
              "u8",
              "working exploitation \u0026mdash; from type confusion triggers through full arbitrary code execution.\u003c/li\u003e"
            ],
            [
              8785,
              "u8",
              "\u003cli\u003e\u003cb\u003eFull attack campaigns demonstrated, not just individual exploits.\u003c/b\u003e We built a complete "
            ],
            [
              8786,
              "u8",
              "\u003cli\u003e\u003cb\u003eFull attack campaigns demonstrated, not just individual exploits.\u003c/b\u003e We built a complete "
            ],
            [
              8893,
              "u8",
              "attack pipeline \u0026mdash; from automated target reconnaissance through exploit delivery, implant staging, "
            ],
            [
              8894,
              "u8",
              "attack pipeline \u0026mdash; from automated target reconnaissance through exploit delivery, implant staging, "
            ],
            [
              9008,
              "u8",
              "covert command channels, and counter-forensics. This demonstrates that browser exploitation is no longer "
            ],
            [
              9009,
              "u8",
              "covert command channels, and counter-forensics. This demonstrates that browser exploitation is no longer "
            ],
            [
              9124,
              "u8",
              "ad-hoc; adversaries with AI tools can build structured, repeatable campaigns that were previously "
            ],
            [
              9125,
              "u8",
              "ad-hoc; adversaries with AI tools can build structured, repeatable campaigns that were previously "
            ],
            [
              9233,
              "u8",
              "resource-intensive.\u003c/li\u003e"
            ],
            [
              9234,
              "u8",
              "resource-intensive.\u003c/li\u003e"
            ],
            [
              9268,
              "u8",
              "\u003cli\u003e\u003cb\u003eAI-discovered vulnerabilities are real.\u003c/b\u003e CVE-2026-2796 was found by AI during "
            ],
            [
              9269,
              "u8",
              "\u003cli\u003e\u003cb\u003eAI-discovered vulnerabilities are real.\u003c/b\u003e CVE-2026-2796 was found by AI during "
            ],
            [
              9367,
              "u8",
              "automated Firefox source code review. All AI-discovered CVEs were independently validated "
            ],
            [
              9368,
              "u8",
              "automated Firefox source code review. All AI-discovered CVEs were independently validated "
            ],
            [
              9468,
              "u8",
              "through manual exploitation testing. Firefox 148 shipped 46 CVEs, with 15+ found by "
            ],
            [
              9469,
              "u8",
              "through manual exploitation testing. Firefox 148 shipped 46 CVEs, with 15+ found by "
            ],
            [
              9563,
              "u8",
              "researchers using AI tools \u0026mdash; a landmark for AI-assisted discovery.\u003c/li\u003e"
            ],
            [
              9564,
              "u8",
              "researchers using AI tools \u0026mdash; a landmark for AI-assisted discovery.\u003c/li\u003e"
            ],
            [
              9651,
              "u8",
              "\u003cli\u003e\u003cb\u003eExploit timelines have compressed 3x.\u003c/b\u003e Our research shows AI-assisted tooling reduces a "
            ],
            [
              9652,
              "u8",
              "\u003cli\u003e\u003cb\u003eExploit timelines have compressed 3x.\u003c/b\u003e Our research shows AI-assisted tooling reduces a "
            ],
            [
              9760,
              "u8",
              "full exploit chain (from initial vulnerability discovery through complete system compromise) "
            ],
            [
              9761,
              "u8",
              "full exploit chain (from initial vulnerability discovery through complete system compromise) "
            ],
            [
              9864,
              "u8",
              "from ~34 days to ~12 days. The required skill level has dropped from specialized security "
            ],
            [
              9865,
              "u8",
              "from ~34 days to ~12 days. The required skill level has dropped from specialized security "
            ],
            [
              9965,
              "u8",
              "researcher to any developer with access to AI coding tools.\u003c/li\u003e"
            ],
            [
              9966,
              "u8",
              "researcher to any developer with access to AI coding tools.\u003c/li\u003e"
            ],
            [
              10040,
              "u8",
              "\u003cli\u003e\u003cb\u003e2 CVEs were exploited in the wild\u003c/b\u003e by advanced threat actors (CVE-2024-9680, "
            ],
            [
              10041,
              "u8",
              "\u003cli\u003e\u003cb\u003e2 CVEs were exploited in the wild\u003c/b\u003e by advanced threat actors (CVE-2024-9680, "
            ],
            [
              10138,
              "u8",
              "CVE-2026-2441 \u0026mdash; both listed on CISA Known Exploited Vulnerabilities catalog). "
            ],
            [
              10139,
              "u8",
              "CVE-2026-2441 \u0026mdash; both listed on CISA Known Exploited Vulnerabilities catalog). "
            ],
            [
              10233,
              "u8",
              "While the primary risk to our organization is insider misuse and compromised internal apps, "
            ],
            [
              10234,
              "u8",
              "While the primary risk to our organization is insider misuse and compromised internal apps, "
            ],
            [
              10336,
              "u8",
              "these incidents confirm that browser exploitation is an active, operational threat.\u003c/li\u003e"
            ],
            [
              10337,
              "u8",
              "these incidents confirm that browser exploitation is an active, operational threat.\u003c/li\u003e"
            ],
            [
              10435,
              "u8",
              "\u003c/ul\u003e"
            ],
            [
              10436,
              "u8",
              "\u003c/ul\u003e"
            ],
            [
              10451,
              "u8",
              "\u003cdiv style=\"font-weight:600;color:#1e3a8a;margin-top:8px\"\u003e"
            ],
            [
              10452,
              "u8",
              "\u003cdiv style=\"font-weight:600;color:#1e3a8a;margin-top:8px\"\u003e"
            ],
            [
              10520,
              "u8",
              "Because we can build these exploit chains internally in days, we know attackers can too. "
            ],
            [
              10521,
              "u8",
              "Because we can build these exploit chains internally in days, we know attackers can too. "
            ],
            [
              10620,
              "u8",
              "This is why every recommendation in this assessment centers on \u003cb\u003ehuman-in-the-loop review\u003c/b\u003e "
            ],
            [
              10621,
              "u8",
              "This is why every recommendation in this assessment centers on \u003cb\u003ehuman-in-the-loop review\u003c/b\u003e "
            ],
            [
              10726,
              "u8",
              "as the primary control \u0026mdash; automated scanning cannot reliably detect AI-generated exploit "
            ],
            [
              10727,
              "u8",
              "as the primary control \u0026mdash; automated scanning cannot reliably detect AI-generated exploit "
            ],
            [
              10831,
              "u8",
              "code that is syntactically valid, functionally invisible, and visually indistinguishable from "
            ],
            [
              10832,
              "u8",
              "code that is syntactically valid, functionally invisible, and visually indistinguishable from "
            ],
            [
              10936,
              "u8",
              "legitimate application code.\u003c/div\u003e"
            ],
            [
              10937,
              "u8",
              "legitimate application code.\u003c/div\u003e"
            ],
            [
              10981,
              "u8",
              "\u003c/div\u003e"
            ],
            [
              10982,
              "u8",
              "\u003c/div\u003e"
            ],
            [
              11032,
              "u8",
              "---"
            ],
            [
              11033,
              "u8",
              "---"
            ],
            [
              11244,
              "u8",
              "\u003cdiv style=\"padding:14px 16px;background:#f9fafb;border:1px solid #e5e7eb;border-radius:8px;'\n        'font-size:12px;color:#374"
            ],
            [
              11244,
              "u8",
              "\u003cdiv style=\"padding:14px 16px;background:#f9fafb;border:1px solid #e5e7eb;border-radius:8px;"
            ],
            [
              11245,
              "u8",
              "\u003cdiv style=\"padding:14px 16px;background:#f9fafb;border:1px solid #e5e7eb;border-radius:8px;"
            ],
            [
              11347,
              "u8",
              "font-size:12px;color:#374151;line-height:1.6;margin-bottom:16px\"\u003e"
            ],
            [
              11348,
              "u8",
              "font-size:12px;color:#374151;line-height:1.6;margin-bottom:16px\"\u003e"
            ],
            [
              11423,
              "u8",
              "\u003cdiv style=\"font-weight:700;font-size:13px;color:#111827;margin-bottom:8px\"\u003e"
            ],
            [
              11424,
              "u8",
              "\u003cdiv style=\"font-weight:700;font-size:13px;color:#111827;margin-bottom:8px\"\u003e"
            ],
            [
              11510,
              "u8",
              "Threat Levels Used in This Assessment\u003c/div\u003e"
            ],
            [
              11511,
              "u8",
              "Threat Levels Used in This Assessment\u003c/div\u003e"
            ],
            [
              11564,
              "u8",
              "This assessment categorizes attack scenarios into six levels based on attacker intent and sophistication. "
            ],
            [
              11565,
              "u8",
              "This assessment categorizes attack scenarios into six levels based on attacker intent and sophistication. "
            ],
            [
              11681,
              "u8",
              "These levels are referenced throughout the dashboard and in the recommendations below."
            ],
            [
              11682,
              "u8",
              "These levels are referenced throughout the dashboard and in the recommendations below."
            ],
            [
              11778,
              "u8",
              "\u003ctable style=\"width:100%;border-collapse:collapse;font-size:12px;margin-top:8px\"\u003e"
            ],
            [
              11779,
              "u8",
              "\u003ctable style=\"width:100%;border-collapse:collapse;font-size:12px;margin-top:8px\"\u003e"
            ],
            [
              11870,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e"
            ],
            [
              11871,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e"
            ],
            [
              11925,
              "u8",
              "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af;width:50px\"\u003eL0\u003c/td\u003e"
            ],
            [
              11926,
              "u8",
              "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af;width:50px\"\u003eL0\u003c/td\u003e"
            ],
            [
              12012,
              "u8",
              "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eAccidental Exposure\u003c/b\u003e \u0026mdash; No malicious intent. Employee misconfigures an app and exposes PH"
            ],
            [
              12013,
              "u8",
              "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eAccidental Exposure\u003c/b\u003e \u0026mdash; No malicious intent. Employee misconfigures an app and exposes PH"
            ],
            [
              12163,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e"
            ],
            [
              12164,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e"
            ],
            [
              12218,
              "u8",
              "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af\"\u003eL1\u003c/td\u003e"
            ],
            [
              12219,
              "u8",
              "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af\"\u003eL1\u003c/td\u003e"
            ],
            [
              12294,
              "u8",
              "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eOpportunistic Data Access\u003c/b\u003e \u0026mdash; Low-effort unauthorized access using available credentials "
            ],
            [
              12295,
              "u8",
              "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eOpportunistic Data Access\u003c/b\u003e \u0026mdash; Low-effort unauthorized access using available credentials "
            ],
            [
              12453,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e"
            ],
            [
              12454,
              "u8",
              "\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e"
            ],
            [
              12508,
              "u8",
              "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af\"\u003eL2\u003c/td\u003e"
            ],
            [
              12509,
              "u8",
              "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af\"\u003eL2\u003c/td\u003e"
            ]
          ],
          "v": {
            "file.stem": "_10_summary",
            "file.basename": "_10_summary.py",
            "source.language": "python",
            "source.imports[0]": "nav_to",
            "source.imports[1]": "register_page",
            "source.imports[2]": "render_callout",
            "source.imports[3]": "render_header_block",
            "source.imports[4]": "st.button",
            "source.imports[5]": "st.columns",
            "source.imports[6]": "st.markdown",
            "source.imports[7]": "st.rerun",
            "source.strings[0]": "#065f46",
            "source.strings[1]": "#1e40af",
            "source.strings[2]": "#7c3aed",
            "source.strings[3]": "#92400e",
            "source.strings[4]": "#991b1b",
            "source.strings[5]": "(\u003ccode\u003ex-forwarded-access-token\u003c/code\u003e, \u003ccode\u003e.config.token\u003c/code\u003e, outbound HTTP calls). ",
            "source.strings[6]": "(Beta, Feb 2026) with lifetimes \u0026lt; 90 days. ",
            "source.strings[7]": "(CVE-2026-33107 CVSS 10.0, CVE-2025-53763 CVSS 9.8, CVE-2024-49194, MLflow CVEs, and 3 additional vendor disclosures).\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[8]": "(revocation, deprovisioning, auditability), not resistance to harvest by malicious code. ",
            "source.strings[9]": "(secrets, agentic AI, marketplace supply chain, webhooks, compute gaps), and Known Platform CVEs ",
            "source.has_imports": true,
            "source.strings[10]": "10 attack vectors beyond the Apps layer -- Consumer Access, Delta Sharing, Genie, MLflow, system tables, Lakeflow, Volumes, SCIM/identity, Repos/Git, and UC federation.",
            "source.strings[11]": "10;padding:2px 6px;border-radius:3px\"\u003e",
            "source.strings[12]": "30+ CVEs cataloged, 15 with exploit code. Exploit scoreboard with implementation levels.",
            "source.strings[13]": "5 interactive step-through scenarios from accidental PHI exposure to full attack chain.",
            "source.strings[14]": "6 CVE-specific deep dives with vulnerability analysis, proof-of-concept validation, and reproduction results.",
            "source.strings[15]": "6-layer architecture breakdown with security gap analysis and HIPAA mapping.",
            "source.strings[16]": "9-component worm PoC with code walkthrough, plus threat infrastructure analysis showing how individual attack capabilities compose into structured campaigns.",
            "source.strings[17]": ";font-weight:600\"\u003e",
            "source.strings[18]": ";padding:10px 14px;margin-bottom:8px;",
            "source.strings[19]": ";text-transform:uppercase;",
            "source.strings[20]": "\u003c/div\u003e",
            "source.strings[21]": "\u003c/span\u003e",
            "source.strings[22]": "\u003c/span\u003e\u003c/div\u003e",
            "source.strings[23]": "\u003c/table\u003e",
            "source.strings[24]": "\u003ca href='https://docs.databricks.com/aws/en/dev-tools/auth/oauth-federation' style='color:#92400e'\u003e",
            "source.strings[25]": "\u003ca href='https://docs.databricks.com/aws/en/dev-tools/auth/oauth-u2m' style='color:#92400e'\u003e",
            "source.strings[26]": "\u003ca href='https://docs.databricks.com/aws/en/dev-tools/auth/pat' style='color:#92400e'\u003elegacy\u003c/a\u003e ",
            "source.strings[27]": "\u003cb\u003eImportant:\u003c/b\u003e Once a token reaches app code, OBO and OAuth tokens are equivalent -- ",
            "source.strings[28]": "\u003cb\u003ePreferred:\u003c/b\u003e Disable OBO and use ",
            "source.strings[29]": "\u003cb\u003ePurpose of this assessment:\u003c/b\u003e This dashboard was built as a red-team exercise to ",
            "source.strings[30]": "\u003cb\u003eShared responsibility model:\u003c/b\u003e This assessment evaluates our organization\\'s governance ",
            "source.strings[31]": "\u003cdiv class=\"section-lbl\"\u003eAssessment Walkthrough\u003c/div\u003e",
            "source.strings[32]": "\u003cdiv class=\"section-lbl\"\u003eRecommendations\u003c/div\u003e",
            "source.strings[33]": "\u003cdiv class=\"section-lbl\"\u003eWhy This Assessment Exists: AI-Accelerated CVE Discovery\u003c/div\u003e",
            "source.strings[34]": "\u003cdiv style=\"border-left:3px solid ",
            "source.strings[35]": "\u003cdiv style=\"display:flex;align-items:center;gap:8px;margin-bottom:4px\"\u003e",
            "source.strings[36]": "\u003cdiv style=\"font-size:11px;color:",
            "source.strings[37]": "\u003cdiv style=\"font-size:11px;font-weight:700;color:#9ca3af;text-transform:uppercase;",
            "source.strings[38]": "\u003cdiv style=\"font-size:12px;color:#374151;line-height:1.6;margin-bottom:4px\"\u003e",
            "source.strings[39]": "\u003cdiv style=\"font-size:12px;color:#6b7280;margin-bottom:4px\"\u003e",
            "source.strings[40]": "\u003cdiv style=\"font-size:13px;font-weight:600;color:#111827\"\u003e",
            "source.strings[41]": "\u003cdiv style=\"font-weight:600;color:#1e3a8a;margin-top:8px\"\u003e",
            "source.strings[42]": "\u003cdiv style=\"font-weight:700;font-size:13px;color:#111827;margin-bottom:8px\"\u003e",
            "source.strings[43]": "\u003cdiv style=\"font-weight:700;font-size:14px;margin-bottom:10px;color:#1e3a8a\"\u003e",
            "source.strings[44]": "\u003cdiv style=\"padding:12px 16px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:6px;",
            "source.strings[45]": "\u003cdiv style=\"padding:12px 16px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:6px;'\n        'font-size:12px;color:#1e40af;line-height:1.6;margin-bottom:16px\"\u003e'\n        '\u003cb\u003eShared responsibility model:\u003c/b\u003e This assessment evaluates our organization\\'s governance '\n        'posture around Databricks Apps deployment. Databricks provides robust security controls '\n        'including Databricks Asset Bundles (DABs), Unity Catalog, and Network Connectivity Controls. '\n        'The findings here reflect gaps in \u003ci\u003eour adoption\u003c/i\u003e of these controls, not deficiencies in '\n        'the platform itself. Every recommendation in this report can be implemented using Databricks\\' '\n        'native tooling.'\n        '\u003c/div\u003e",
            "source.strings[46]": "\u003cdiv style=\"padding:12px 16px;background:#f0fdf4;border:1px solid #bbf7d0;border-radius:6px;",
            "source.strings[47]": "\u003cdiv style=\"padding:12px 16px;background:#f0fdf4;border:1px solid #bbf7d0;border-radius:6px;'\n        'font-size:12px;color:#166534;line-height:1.6;margin-bottom:16px\"\u003e'\n        '\u003cb\u003ePurpose of this assessment:\u003c/b\u003e This dashboard was built as a red-team exercise to '\n        'demonstrate the worst-case scenario if production Databricks Apps are deployed without '\n        'human-in-the-loop code review. The exploit chains, attack scenarios, and proof-of-concept '\n        'tools shown here illustrate what an adversary \u003ci\u003ecould\u003c/i\u003e do - not what has occurred '\n        'in our environment. The goal is to build organizational support for mandatory code review '\n        'gates and security governance before apps reach production. All exploit code targets '\n        'publicly disclosed, patched CVEs. All lab experiments are non-destructive and use mock '\n        'data outside approved sandboxes. No vendor systems were tested without authorization.'\n        '\u003c/div\u003e",
            "source.strings[48]": "\u003cdiv style=\"padding:14px 16px;background:#f9fafb;border:1px solid #e5e7eb;border-radius:8px;",
            "source.strings[49]": "\u003cdiv style=\"padding:14px 16px;background:#f9fafb;border:1px solid #e5e7eb;border-radius:8px;'\n        'font-size:12px;color:#374151;line-height:1.6;margin-bottom:16px\"\u003e'\n        '\u003cdiv style=\"font-weight:700;font-size:13px;color:#111827;margin-bottom:8px\"\u003e'\n        'Threat Levels Used in This Assessment\u003c/div\u003e'\n        'This assessment categorizes attack scenarios into six levels based on attacker intent and sophistication. '\n        'These levels are referenced throughout the dashboard and in the recommendations below.'\n        '\u003ctable style=\"width:100%;border-collapse:collapse;font-size:12px;margin-top:8px\"\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e'\n        '\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af;width:50px\"\u003eL0\u003c/td\u003e'\n        '\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eAccidental Exposure\u003c/b\u003e \u0026mdash; No malicious intent. Employee misconfigures an app and exposes PHI.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e'\n        '\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af\"\u003eL1\u003c/td\u003e'\n        '\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eOpportunistic Data Access\u003c/b\u003e \u0026mdash; Low-effort unauthorized access using available credentials or tokens.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e'\n        '\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af\"\u003eL2\u003c/td\u003e'\n        '\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eTargeted Credential Theft\u003c/b\u003e \u0026mdash; Deliberate token harvesting or consent phishing to escalate access.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e'\n        '\u003ctd style=\"padding:4px 8px;font-weight:700;color:#92400e\"\u003eL3\u003c/td\u003e'\n        '\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eInfrastructure Manipulation\u003c/b\u003e \u0026mdash; Modifying platform resources (jobs, pipelines, models) to establish persistence.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e'\n        '\u003ctd style=\"padding:4px 8px;font-weight:700;color:#92400e\"\u003eL4\u003c/td\u003e'\n        '\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eSupply Chain Compromise\u003c/b\u003e \u0026mdash; Malicious dependencies or templates that bypass code review entirely.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr\u003e'\n        '\u003ctd style=\"padding:4px 8px;font-weight:700;color:#991b1b\"\u003eL5\u003c/td\u003e'\n        '\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eFull Attack Chain\u003c/b\u003e \u0026mdash; Multi-stage compromise: browser exploit, credential harvest, lateral movement, persistence.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003c/table\u003e'\n        '\u003c/div\u003e",
            "source.strings[50]": "\u003cdiv style=\"padding:16px 18px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;",
            "source.strings[51]": "\u003cdiv style=\"padding:16px 18px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;'\n        'font-size:13px;color:#1e40af;line-height:1.7;margin:12px 0\"\u003e'\n        '\u003cdiv style=\"font-weight:700;font-size:14px;margin-bottom:10px;color:#1e3a8a\"\u003e'\n        'Internal security research drives this assessment\u003c/div\u003e'\n        'This dashboard is not a theoretical exercise. It is grounded in our own vulnerability '\n        'research program, which uses AI-assisted closed-loop systems to discover, analyze, and '\n        'validate browser CVEs at a pace that was not possible two years ago. Key findings from '\n        'that program:'\n        '\u003cul style=\"margin:10px 0;padding-left:20px;color:#1e40af\"\u003e'\n        '\u003cli\u003e\u003cb\u003e17 CVEs reproduced\u003c/b\u003e across Chrome and Firefox (2024\u0026ndash;2026), with 13 achieving '\n        'working exploitation \u0026mdash; from type confusion triggers through full arbitrary code execution.\u003c/li\u003e'\n        '\u003cli\u003e\u003cb\u003eFull attack campaigns demonstrated, not just individual exploits.\u003c/b\u003e We built a complete '\n        'attack pipeline \u0026mdash; from automated target reconnaissance through exploit delivery, implant staging, '\n        'covert command channels, and counter-forensics. This demonstrates that browser exploitation is no longer '\n        'ad-hoc; adversaries with AI tools can build structured, repeatable campaigns that were previously '\n        'resource-intensive.\u003c/li\u003e'\n        '\u003cli\u003e\u003cb\u003eAI-discovered vulnerabilities are real.\u003c/b\u003e CVE-2026-2796 was found by AI during '\n        'automated Firefox source code review. All AI-discovered CVEs were independently validated '\n        'through manual exploitation testing. Firefox 148 shipped 46 CVEs, with 15+ found by '\n        'researchers using AI tools \u0026mdash; a landmark for AI-assisted discovery.\u003c/li\u003e'\n        '\u003cli\u003e\u003cb\u003eExploit timelines have compressed 3x.\u003c/b\u003e Our research shows AI-assisted tooling reduces a '\n        'full exploit chain (from initial vulnerability discovery through complete system compromise) '\n        'from ~34 days to ~12 days. The required skill level has dropped from specialized security '\n        'researcher to any developer with access to AI coding tools.\u003c/li\u003e'\n        '\u003cli\u003e\u003cb\u003e2 CVEs were exploited in the wild\u003c/b\u003e by advanced threat actors (CVE-2024-9680, '\n        'CVE-2026-2441 \u0026mdash; both listed on CISA Known Exploited Vulnerabilities catalog). '\n        'While the primary risk to our organization is insider misuse and compromised internal apps, '\n        'these incidents confirm that browser exploitation is an active, operational threat.\u003c/li\u003e'\n        '\u003c/ul\u003e'\n        '\u003cdiv style=\"font-weight:600;color:#1e3a8a;margin-top:8px\"\u003e'\n        'Because we can build these exploit chains internally in days, we know attackers can too. '\n        'This is why every recommendation in this assessment centers on \u003cb\u003ehuman-in-the-loop review\u003c/b\u003e '\n        'as the primary control \u0026mdash; automated scanning cannot reliably detect AI-generated exploit '\n        'code that is syntactically valid, functionally invisible, and visually indistinguishable from '\n        'legitimate application code.\u003c/div\u003e'\n        '\u003c/div\u003e",
            "source.strings[52]": "\u003cli\u003e\u003cb\u003e17 CVEs reproduced\u003c/b\u003e across Chrome and Firefox (2024\u0026ndash;2026), with 13 achieving ",
            "source.strings[53]": "\u003cli\u003e\u003cb\u003e2 CVEs were exploited in the wild\u003c/b\u003e by advanced threat actors (CVE-2024-9680, ",
            "source.strings[54]": "\u003cli\u003e\u003cb\u003eAI-discovered vulnerabilities are real.\u003c/b\u003e CVE-2026-2796 was found by AI during ",
            "source.strings[55]": "\u003cli\u003e\u003cb\u003eExploit timelines have compressed 3x.\u003c/b\u003e Our research shows AI-assisted tooling reduces a ",
            "source.strings[56]": "\u003cli\u003e\u003cb\u003eFull attack campaigns demonstrated, not just individual exploits.\u003c/b\u003e We built a complete ",
            "source.strings[57]": "\u003cspan style=\"font-size:10px;font-weight:700;color:",
            "source.strings[58]": "\u003cspan style=\"font-size:12px;color:#6b7280\"\u003e",
            "source.strings[59]": "\u003cspan style=\"font-weight:700;font-size:13px;color:#111827\"\u003e",
            "source.strings[60]": "\u003ctable style=\"width:100%;border-collapse:collapse;font-size:12px;margin-top:8px\"\u003e",
            "source.strings[61]": "\u003ctable style=\"width:100%;border-collapse:collapse;font-size:13px;margin-bottom:16px\"\u003e",
            "source.strings[62]": "\u003ctable style=\"width:100%;border-collapse:collapse;font-size:13px;margin-bottom:16px\"\u003e'\n        '\u003ctr style=\"border-bottom:2px solid #e5e7eb\"\u003e'\n        '\u003cth style=\"text-align:left;padding:10px 14px;font-size:11px;text-transform:uppercase;'\n        'letter-spacing:.05em;color:#6b7280;width:40%\"\u003eFinding\u003c/th\u003e'\n        '\u003cth style=\"text-align:left;padding:10px 14px;font-size:11px;text-transform:uppercase;'\n        'letter-spacing:.05em;color:#6b7280\"\u003eDetail\u003c/th\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e'\n        '\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eNo approval gate enforced by default\u003c/td\u003e'\n        '\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eIn the default configuration, any workspace user can create, deploy, and expose a '\n        'Databricks App with data access. Databricks provides Databricks Asset Bundles (DABs) for CI/CD gating, but no approval workflow is enforced by default.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e'\n        '\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eFull renderer code execution achieved\u003c/td\u003e'\n        '\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eCVE-2024-5830 (Chrome 125) -- a browser engine vulnerability '\n        'allowed arbitrary code execution on the user\\'s workstation with no interaction required.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e'\n        '\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003e30+ browser CVEs cataloged \u0026amp; validated\u003c/td\u003e'\n        '\u003ctd style=\"padding:10px 14px;color:#374151\"\u003e15 with working exploit code (5 achieving arbitrary '\n        'code execution), spanning Chrome and Firefox 2024-2026.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e'\n        '\u003ctd style=\"padding:10px 14px;font-weight:600;color:#92400e\"\u003eReliable browser exploit on stock Chrome 144\u003c/td\u003e'\n        '\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eCVE-2026-2441 -- 97% reliable exploitation (62 of 64 attempts successful) '\n        'on an unmodified browser, zero user interaction required. Listed on CISA Known Exploited Vulnerabilities catalog.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e'\n        '\u003ctd style=\"padding:10px 14px;font-weight:600;color:#92400e\"\u003ePost-exploitation lateral movement demonstrated\u003c/td\u003e'\n        '\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eProof-of-concept demonstrating '\n        'credential reuse, persistence, and app-to-app propagation using harvested service principal credentials.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e'\n        '\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eStructured attack campaigns are feasible, not theoretical\u003c/td\u003e'\n        '\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eWe demonstrated that browser exploits can be orchestrated into '\n        'repeatable, automated attack campaigns \u0026mdash; with target validation before exploit delivery, automated exploit '\n        'selection based on browser version, and multi-stage payload staging. This represents a step change from '\n        'individual vulnerability triggers \u0026mdash; structured campaigns that were historically resource-intensive '\n        'are now accessible with AI-assisted development tools.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e'\n        '\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eFull post-compromise infrastructure demonstrated\u003c/td\u003e'\n        '\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eModular implant staging (the exploit, the persistence mechanism, and '\n        'the payload are independent \u0026mdash; patching one does not disrupt the others), covert command channels that mimic '\n        'legitimate platform traffic, centralized management of compromised sessions at scale, and counter-forensics '\n        'capabilities that defeat incident response timelines.\u003c/td\u003e\u003c/tr\u003e'\n        '\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e'\n        '\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003e20+ platform attack vectors across 3 dedicated dashboards\u003c/td\u003e'\n        '\u003ctd style=\"padding:10px 14px;color:#374151\"\u003ePlatform Attack Surface (10 vectors), Advanced Platform Risks '\n        '(secrets, agentic AI, marketplace supply chain, webhooks, compute gaps), and Known Platform CVEs '\n        '(CVE-2026-33107 CVSS 10.0, CVE-2025-53763 CVSS 9.8, CVE-2024-49194, MLflow CVEs, and 3 additional vendor disclosures).\u003c/td\u003e\u003c/tr\u003e'\n        '\u003c/table\u003e",
            "source.strings[63]": "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003e15 with working exploit code (5 achieving arbitrary ",
            "source.strings[64]": "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eCVE-2024-5830 (Chrome 125) -- a browser engine vulnerability ",
            "source.strings[65]": "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eCVE-2026-2441 -- 97% reliable exploitation (62 of 64 attempts successful) ",
            "source.strings[66]": "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eIn the default configuration, any workspace user can create, deploy, and expose a ",
            "source.strings[67]": "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eModular implant staging (the exploit, the persistence mechanism, and ",
            "source.strings[68]": "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003ePlatform Attack Surface (10 vectors), Advanced Platform Risks ",
            "source.strings[69]": "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eProof-of-concept demonstrating ",
            "source.strings[70]": "\u003ctd style=\"padding:10px 14px;color:#374151\"\u003eWe demonstrated that browser exploits can be orchestrated into ",
            "source.strings[71]": "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#92400e\"\u003ePost-exploitation lateral movement demonstrated\u003c/td\u003e",
            "source.strings[72]": "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#92400e\"\u003eReliable browser exploit on stock Chrome 144\u003c/td\u003e",
            "source.strings[73]": "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003e20+ platform attack vectors across 3 dedicated dashboards\u003c/td\u003e",
            "source.strings[74]": "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003e30+ browser CVEs cataloged \u0026amp; validated\u003c/td\u003e",
            "source.strings[75]": "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eFull post-compromise infrastructure demonstrated\u003c/td\u003e",
            "source.strings[76]": "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eFull renderer code execution achieved\u003c/td\u003e",
            "source.strings[77]": "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eNo approval gate enforced by default\u003c/td\u003e",
            "source.strings[78]": "\u003ctd style=\"padding:10px 14px;font-weight:600;color:#991b1b\"\u003eStructured attack campaigns are feasible, not theoretical\u003c/td\u003e",
            "source.strings[79]": "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eAccidental Exposure\u003c/b\u003e \u0026mdash; No malicious intent. Employee misconfigures an app and exposes PHI.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[80]": "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eFull Attack Chain\u003c/b\u003e \u0026mdash; Multi-stage compromise: browser exploit, credential harvest, lateral movement, persistence.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[81]": "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eInfrastructure Manipulation\u003c/b\u003e \u0026mdash; Modifying platform resources (jobs, pipelines, models) to establish persistence.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[82]": "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eOpportunistic Data Access\u003c/b\u003e \u0026mdash; Low-effort unauthorized access using available credentials or tokens.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[83]": "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eSupply Chain Compromise\u003c/b\u003e \u0026mdash; Malicious dependencies or templates that bypass code review entirely.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[84]": "\u003ctd style=\"padding:4px 8px\"\u003e\u003cb\u003eTargeted Credential Theft\u003c/b\u003e \u0026mdash; Deliberate token harvesting or consent phishing to escalate access.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[85]": "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af\"\u003eL1\u003c/td\u003e",
            "source.strings[86]": "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af\"\u003eL2\u003c/td\u003e",
            "source.strings[87]": "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#1e40af;width:50px\"\u003eL0\u003c/td\u003e",
            "source.strings[88]": "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#92400e\"\u003eL3\u003c/td\u003e",
            "source.strings[89]": "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#92400e\"\u003eL4\u003c/td\u003e",
            "source.strings[90]": "\u003ctd style=\"padding:4px 8px;font-weight:700;color:#991b1b\"\u003eL5\u003c/td\u003e",
            "source.strings[91]": "\u003cth style=\"text-align:left;padding:10px 14px;font-size:11px;text-transform:uppercase;",
            "source.strings[92]": "\u003ctr style=\"border-bottom:1px solid #e5e7eb\"\u003e",
            "source.strings[93]": "\u003ctr style=\"border-bottom:1px solid #f3f4f6\"\u003e",
            "source.strings[94]": "\u003ctr style=\"border-bottom:2px solid #e5e7eb\"\u003e",
            "source.strings[95]": "\u003cul style=\"margin:10px 0;padding-left:20px;color:#1e40af\"\u003e",
            "source.strings[96]": "ARCHITECTURE",
            "source.strings[97]": "Advanced Risks \u0026 CVEs",
            "source.strings[98]": "Apply UC column masks on PHI/PII columns to gate Genie and Consumer Access queries. ",
            "source.strings[99]": "Architecture review, attack surface analysis, exploit chain validation, and policy ",
            "source.functions[0]": "render_summary",
            "source.strings[100]": "Architecture review, attack surface analysis, exploit chain validation, and policy '\n        'recommendations for production workspaces with PHI access.\u003cbr\u003e'\n        '\u003cspan style=\"font-size:12px;color:#6b7280\"\u003e'\n        'Source: \u003ca href=\"https://github.com/AndrewAltimit/exploits\" style=\"color:#2563eb\"\u003e'\n        'github.com/AndrewAltimit/exploits\u003c/a\u003e\u003c/span\u003e",
            "source.strings[101]": "Attack Scenarios",
            "source.strings[102]": "Attack sequence timeline, credential exposure map, and lateral movement architecture.",
            "source.strings[103]": "Audit Delta Sharing tokens and enforce short lifetimes with IP ACLs.",
            "source.strings[104]": "Automated scanners cannot catch the result -- human judgment is the only reliable gate.",
            "source.strings[105]": "Because we can build these exploit chains internally in days, we know attackers can too. ",
            "source.strings[106]": "Blocks L0-L2 \u0026middot; Degrades L3-L5 \u0026middot; Validated by internal CVE program",
            "source.strings[107]": "Browser CVE Implementations",
            "source.strings[108]": "Browser Version Enforcement",
            "source.strings[109]": "CVE-2026-2441 \u0026mdash; both listed on CISA Known Exploited Vulnerabilities catalog). ",
            "source.strings[110]": "Chrome / Firefox Vulnerability Analysis",
            "source.strings[111]": "Closes the n-day exploit window",
            "source.strings[112]": "Critical",
            "source.strings[113]": "Databricks App with data access. Databricks provides Databricks Asset Bundles (DABs) for CI/CD gating, but no approval workflow is enforced by default.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[114]": "Databricks Apps -- Security Assessment",
            "source.strings[115]": "Databricks labels PATs as ",
            "source.strings[116]": "Deploy via CI/CD with Databricks Asset Bundles (DABs) and a mandatory approval gate. ",
            "source.strings[117]": "Detection Matrix",
            "source.strings[118]": "Disable MLflow pickle deserialization (\u003ccode\u003eMLFLOW_ALLOW_PICKLE_DESERIALIZATION=False\u003c/code\u003e). ",
            "source.strings[119]": "Disable MLflow pickle deserialization (\u003ccode\u003eMLFLOW_ALLOW_PICKLE_DESERIALIZATION=False\u003c/code\u003e). \"\n         \"Apply UC column masks on PHI/PII columns to gate Genie and Consumer Access queries. \"\n         \"Restrict \u003ccode\u003esystem.*\u003c/code\u003e table access to a dedicated monitoring group. \"\n         \"Audit Delta Sharing tokens and enforce short lifetimes with IP ACLs.",
            "source.strings[120]": "Egress Controls + Monitoring",
            "source.strings[121]": "Enable NCC with Restricted Network Policy (Enterprise tier) for deny-by-default egress. ",
            "source.strings[122]": "Enable NCC with Restricted Network Policy (Enterprise tier) for deny-by-default egress. \"\n         \"Monitor \u003ccode\u003esystem.access.outbound_network\u003c/code\u003e for anomalous connections. \"\n         \"Note: SQL Warehouse egress is governed separately from app compute egress.",
            "source.strings[123]": "Enforce minimum browser versions for workspace access. ",
            "source.strings[124]": "Enforce minimum browser versions for workspace access. \"\n         \"The exploit window between patch release and enterprise rollout is when \"\n         \"organizations are most exposed. Managed browser policies (Chrome Enterprise, \"\n         \"Firefox ESR) reduce this window from weeks to hours.",
            "source.strings[125]": "Evaluate the authorization model for each app. ",
            "source.strings[126]": "Evaluate the authorization model for each app. \"\n         \"\u003cb\u003ePreferred:\u003c/b\u003e Disable OBO and use \"\n         \"\u003ca href='https://docs.databricks.com/aws/en/dev-tools/auth/oauth-federation' style='color:#92400e'\u003e\"\n         \"OAuth token federation\u003c/a\u003e or \"\n         \"\u003ca href='https://docs.databricks.com/aws/en/dev-tools/auth/oauth-u2m' style='color:#92400e'\u003e\"\n         \"OAuth U2M\u003c/a\u003e -- short-lived tokens (1 hour), managed by the IdP, no secrets to store or leak. \"\n         \"Databricks labels PATs as \"\n         \"\u003ca href='https://docs.databricks.com/aws/en/dev-tools/auth/pat' style='color:#92400e'\u003elegacy\u003c/a\u003e \"\n         \"and strongly recommends OAuth. \"\n         \"PATs should only be used as a fallback where OAuth is not feasible; if used, enforce scoped PATs \"\n         \"(Beta, Feb 2026) with lifetimes \u0026lt; 90 days. \"\n         \"\u003cb\u003eImportant:\u003c/b\u003e Once a token reaches app code, OBO and OAuth tokens are equivalent -- \"\n         \"same type, same capabilities, same blast radius. OAuth's advantage is operational \"\n         \"(revocation, deprovisioning, auditability), not resistance to harvest by malicious code. \"\n         \"Pair auth model changes with CI/CD scanning for token access patterns \"\n         \"(\u003ccode\u003ex-forwarded-access-token\u003c/code\u003e, \u003ccode\u003e.config.token\u003c/code\u003e, outbound HTTP calls). \"\n         \"The right choice depends on the app's data sensitivity and user population.",
            "source.strings[127]": "Firefox ESR) reduce this window from weeks to hours.",
            "source.strings[128]": "Human-in-the-Loop Code Review",
            "source.strings[129]": "Interactive experiments -- SP credential exposure, browser exploit demos, header inspection.",
            "source.strings[130]": "Internal security research drives this assessment\u003c/div\u003e",
            "source.strings[131]": "LIVE DEMO",
            "source.strings[132]": "Lateral Movement PoC",
            "source.strings[133]": "Limits data exfiltration channels",
            "source.strings[134]": "Live Lab",
            "source.strings[135]": "Monitor \u003ccode\u003esystem.access.outbound_network\u003c/code\u003e for anomalous connections. ",
            "source.strings[136]": "No Databricks App should reach production without security-focused code review. ",
            "source.strings[137]": "No Databricks App should reach production without security-focused code review. \"\n         \"Deploy via CI/CD with Databricks Asset Bundles (DABs) and a mandatory approval gate. \"\n         \"This is the single most impactful control -- it blocks L0-L2 scenarios entirely \"\n         \"and degrades attacker velocity at L3-L5. \"\n         \"Our internal CVE research (17 reproduced, 13 with working exploits, 1 AI-discovered) \"\n         \"demonstrates that AI agents compress exploit development from weeks to days. \"\n         \"Automated scanners cannot catch the result -- human judgment is the only reliable gate.",
            "source.strings[138]": "Note: SQL Warehouse egress is governed separately from app compute egress.",
            "source.strings[139]": "OAuth U2M\u003c/a\u003e -- short-lived tokens (1 hour), managed by the IdP, no secrets to store or leak. ",
            "source.strings[140]": "OAuth token federation\u003c/a\u003e or ",
            "source.strings[141]": "Obfuscation \u0026 Evasion",
            "source.strings[142]": "Our internal CVE research (17 reproduced, 13 with working exploits, 1 AI-discovered) ",
            "source.strings[143]": "PATs should only be used as a fallback where OAuth is not feasible; if used, enforce scoped PATs ",
            "source.strings[144]": "Pair auth model changes with CI/CD scanning for token access patterns ",
            "source.strings[145]": "Platform \u0026 Gaps",
            "source.strings[146]": "Platform Attack Surface",
            "source.strings[147]": "Platform Feature Hardening",
            "source.strings[148]": "Post-Exploitation Impact",
            "source.strings[149]": "Recommended",
            "source.strings[150]": "Reduces platform-wide attack surface beyond the Apps layer",
            "source.strings[151]": "Reduces token exposure \u0026middot; OAuth federation preferred \u0026middot; Scanning required",
            "source.strings[152]": "Restrict \u003ccode\u003esystem.*\u003c/code\u003e table access to a dedicated monitoring group. ",
            "source.strings[153]": "Restrict Authentication Model",
            "source.strings[154]": "Secrets API, agentic AI / MCP, marketplace supply chain, webhooks, compute gaps, plus 7 known platform CVEs including CVE-2026-33107 (CVSS 10.0).",
            "source.strings[155]": "Source: \u003ca href=\"https://github.com/AndrewAltimit/exploits\" style=\"color:#2563eb\"\u003e",
            "source.strings[156]": "THREAT LANDSCAPE",
            "source.strings[157]": "Technique gallery, scanner evasion matrix, and side-by-side legitimate vs. malicious code comparison.",
            "source.strings[158]": "The exploit window between patch release and enterprise rollout is when ",
            "source.strings[159]": "The findings here reflect gaps in \u003ci\u003eour adoption\u003c/i\u003e of these controls, not deficiencies in ",
            "source.strings[160]": "The right choice depends on the app's data sensitivity and user population.",
            "source.strings[161]": "These levels are referenced throughout the dashboard and in the recommendations below.",
            "source.strings[162]": "This assessment categorizes attack scenarios into six levels based on attacker intent and sophistication. ",
            "source.strings[163]": "This dashboard is not a theoretical exercise. It is grounded in our own vulnerability ",
            "source.strings[164]": "This is the single most impactful control -- it blocks L0-L2 scenarios entirely ",
            "source.strings[165]": "This is why every recommendation in this assessment centers on \u003cb\u003ehuman-in-the-loop review\u003c/b\u003e ",
            "source.strings[166]": "Threat Levels Used in This Assessment\u003c/div\u003e",
            "source.strings[167]": "Toggle your deployed controls to see which attack scenarios remain undetected.",
            "source.strings[168]": "VULNERABILITY ANALYSIS",
            "source.strings[169]": "While the primary risk to our organization is insider misuse and compromised internal apps, ",
            "source.strings[170]": "ad-hoc; adversaries with AI tools can build structured, repeatable campaigns that were previously ",
            "source.strings[171]": "advanced_risks",
            "source.strings[172]": "allowed arbitrary code execution on the user\\'s workstation with no interaction required.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[173]": "and degrades attacker velocity at L3-L5. ",
            "source.strings[174]": "and strongly recommends OAuth. ",
            "source.strings[175]": "architecture",
            "source.strings[176]": "are now accessible with AI-assisted development tools.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[177]": "as the primary control \u0026mdash; automated scanning cannot reliably detect AI-generated exploit ",
            "source.strings[178]": "attack pipeline \u0026mdash; from automated target reconnaissance through exploit delivery, implant staging, ",
            "source.strings[179]": "attack_theater",
            "source.strings[180]": "automated Firefox source code review. All AI-discovered CVEs were independently validated ",
            "source.strings[181]": "background:#f9fafb;border-radius:0 6px 6px 0\"\u003e",
            "source.strings[182]": "border-color:#e5e7eb;border-width:2px",
            "source.strings[183]": "browser_cves",
            "source.strings[184]": "capabilities that defeat incident response timelines.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[185]": "code execution), spanning Chrome and Firefox 2024-2026.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[186]": "code that is syntactically valid, functionally invisible, and visually indistinguishable from ",
            "source.strings[187]": "covert command channels, and counter-forensics. This demonstrates that browser exploitation is no longer ",
            "source.strings[188]": "credential reuse, persistence, and app-to-app propagation using harvested service principal credentials.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[189]": "data outside approved sandboxes. No vendor systems were tested without authorization.",
            "source.strings[190]": "dd_chrome_v8",
            "source.strings[191]": "demonstrate the worst-case scenario if production Databricks Apps are deployed without ",
            "source.strings[192]": "demonstrates that AI agents compress exploit development from weeks to days. ",
            "source.strings[193]": "detection_gaps",
            "source.strings[194]": "f\"guide_{dash_id}",
            "source.strings[195]": "f'\u003c/div\u003e",
            "source.strings[196]": "f'\u003cdiv style=\"border-left:3px solid {color};padding:10px 14px;margin-bottom:8px;",
            "source.strings[197]": "f'\u003cdiv style=\"border-left:3px solid {color};padding:10px 14px;margin-bottom:8px;'\n            f'background:#f9fafb;border-radius:0 6px 6px 0\"\u003e'\n            f'\u003cdiv style=\"display:flex;align-items:center;gap:8px;margin-bottom:4px\"\u003e'\n            f'\u003cspan style=\"font-size:10px;font-weight:700;color:{color};text-transform:uppercase;'\n            f'letter-spacing:.05em;background:{color}10;padding:2px 6px;border-radius:3px\"\u003e{severity}\u003c/span\u003e'\n            f'\u003cspan style=\"font-weight:700;font-size:13px;color:#111827\"\u003e{title}\u003c/span\u003e\u003c/div\u003e'\n            f'\u003cdiv style=\"font-size:12px;color:#374151;line-height:1.6;margin-bottom:4px\"\u003e{desc}\u003c/div\u003e'\n            f'\u003cdiv style=\"font-size:11px;color:{color};font-weight:600\"\u003e{effect}\u003c/div\u003e'\n            f'\u003c/div\u003e",
            "source.strings[198]": "f'\u003cdiv style=\"display:flex;align-items:center;gap:8px;margin-bottom:4px\"\u003e",
            "source.strings[199]": "f'\u003cdiv style=\"font-size:11px;color:{color};font-weight:600\"\u003e{effect}\u003c/div\u003e",
            "source.strings[200]": "f'\u003cdiv style=\"font-size:11px;font-weight:700;color:#9ca3af;text-transform:uppercase;",
            "source.strings[201]": "f'\u003cdiv style=\"font-size:11px;font-weight:700;color:#9ca3af;text-transform:uppercase;'\n            f'letter-spacing:.06em;margin:12px 0 6px\"\u003e{section}\u003c/div\u003e",
            "source.strings[202]": "f'\u003cdiv style=\"font-size:12px;color:#374151;line-height:1.6;margin-bottom:4px\"\u003e{desc}\u003c/div\u003e",
            "source.strings[203]": "f'\u003cdiv style=\"font-size:12px;color:#6b7280;margin-bottom:4px\"\u003e{desc}\u003c/div\u003e",
            "source.strings[204]": "f'\u003cdiv style=\"font-size:13px;font-weight:600;color:#111827\"\u003e{label}\u003c/div\u003e",
            "source.strings[205]": "f'\u003cdiv style=\"font-size:13px;font-weight:600;color:#111827\"\u003e{label}\u003c/div\u003e'\n                    f'\u003cdiv style=\"font-size:12px;color:#6b7280;margin-bottom:4px\"\u003e{desc}\u003c/div\u003e",
            "source.strings[206]": "f'\u003cspan style=\"font-size:10px;font-weight:700;color:{color};text-transform:uppercase;",
            "source.strings[207]": "f'\u003cspan style=\"font-weight:700;font-size:13px;color:#111827\"\u003e{title}\u003c/span\u003e\u003c/div\u003e",
            "source.strings[208]": "f'background:#f9fafb;border-radius:0 6px 6px 0\"\u003e",
            "source.strings[209]": "f'letter-spacing:.05em;background:{color}10;padding:2px 6px;border-radius:3px\"\u003e{severity}\u003c/span\u003e",
            "source.strings[210]": "f'letter-spacing:.06em;margin:12px 0 6px\"\u003e{section}\u003c/div\u003e",
            "source.strings[211]": "font-size:12px;color:#166534;line-height:1.6;margin-bottom:16px\"\u003e",
            "source.strings[212]": "font-size:12px;color:#1e40af;line-height:1.6;margin-bottom:16px\"\u003e",
            "source.strings[213]": "font-size:12px;color:#374151;line-height:1.6;margin-bottom:16px\"\u003e",
            "source.strings[214]": "font-size:13px;color:#1e40af;line-height:1.7;margin:12px 0\"\u003e",
            "source.strings[215]": "from ~34 days to ~12 days. The required skill level has dropped from specialized security ",
            "source.strings[216]": "full exploit chain (from initial vulnerability discovery through complete system compromise) ",
            "source.strings[217]": "gates and security governance before apps reach production. All exploit code targets ",
            "source.strings[218]": "github.com/AndrewAltimit/exploits\u003c/a\u003e\u003c/span\u003e",
            "source.strings[219]": "guide_",
            "source.strings[220]": "human-in-the-loop code review. The exploit chains, attack scenarios, and proof-of-concept ",
            "source.strings[221]": "idol_deep_dive",
            "source.strings[222]": "in our environment. The goal is to build organizational support for mandatory code review ",
            "source.strings[223]": "including Databricks Asset Bundles (DABs), Unity Catalog, and Network Connectivity Controls. ",
            "source.strings[224]": "individual vulnerability triggers \u0026mdash; structured campaigns that were historically resource-intensive ",
            "source.strings[225]": "legitimate application code.\u003c/div\u003e",
            "source.strings[226]": "legitimate platform traffic, centralized management of compromised sessions at scale, and counter-forensics ",
            "source.strings[227]": "letter-spacing:.05em;background:",
            "source.strings[228]": "letter-spacing:.05em;color:#6b7280\"\u003eDetail\u003c/th\u003e\u003c/tr\u003e",
            "source.strings[229]": "letter-spacing:.05em;color:#6b7280;width:40%\"\u003eFinding\u003c/th\u003e",
            "source.strings[230]": "letter-spacing:.06em;margin:12px 0 6px\"\u003e",
            "source.strings[231]": "live_lab",
            "source.strings[232]": "native tooling.",
            "source.strings[233]": "obfuscation",
            "source.strings[234]": "on an unmodified browser, zero user interaction required. Listed on CISA Known Exploited Vulnerabilities catalog.\u003c/td\u003e\u003c/tr\u003e",
            "source.strings[235]": "organizations are most exposed. Managed browser policies (Chrome Enterprise, ",
            "source.strings[236]": "platform_surface",
            "source.strings[237]": "post_exploitation",
            "source.strings[238]": "posture around Databricks Apps deployment. Databricks provides robust security controls ",
            "source.strings[239]": "publicly disclosed, patched CVEs. All lab experiments are non-destructive and use mock ",
            "source.strings[240]": "recommendations for production workspaces with PHI access.\u003cbr\u003e",
            "source.strings[241]": "repeatable, automated attack campaigns \u0026mdash; with target validation before exploit delivery, automated exploit ",
            "source.strings[242]": "research program, which uses AI-assisted closed-loop systems to discover, analyze, and ",
            "source.strings[243]": "researcher to any developer with access to AI coding tools.\u003c/li\u003e",
            "source.strings[244]": "researchers using AI tools \u0026mdash; a landmark for AI-assisted discovery.\u003c/li\u003e",
            "source.strings[245]": "resource-intensive.\u003c/li\u003e",
            "source.strings[246]": "same type, same capabilities, same blast radius. OAuth's advantage is operational ",
            "source.strings[247]": "selection based on browser version, and multi-stage payload staging. This represents a step change from ",
            "source.strings[248]": "that program:",
            "source.strings[249]": "the payload are independent \u0026mdash; patching one does not disrupt the others), covert command channels that mimic ",
            "source.strings[250]": "the platform itself. Every recommendation in this report can be implemented using Databricks\\' ",
            "source.strings[251]": "these incidents confirm that browser exploitation is an active, operational threat.\u003c/li\u003e",
            "source.strings[252]": "through manual exploitation testing. Firefox 148 shipped 46 CVEs, with 15+ found by ",
            "source.strings[253]": "tools shown here illustrate what an adversary \u003ci\u003ecould\u003c/i\u003e do - not what has occurred ",
            "source.strings[254]": "validate browser CVEs at a pace that was not possible two years ago. Key findings from ",
            "source.strings[255]": "working exploitation \u0026mdash; from type confusion triggers through full arbitrary code execution.\u003c/li\u003e"
          },
          "ct": [
            "_nav_to",
            "register_page",
            "render_callout",
            "render_header_block",
            "st.button",
            "st.columns",
            "st.markdown",
            "st.rerun"
          ],
          "id": "python",
          "mc": [
            "st.button",
            "st.columns",
            "st.markdown",
            "st.rerun"
          ]
        },
        "id": 0,
        "sz": 22493,
        "ts": [
          {
            "c": 1.0,
            "d": "\"Environment\" keyword",
            "e": [
              "environment"
            ],
            "i": "micro-behaviors/data/text/keywords/env::environment-keyword",
            "l": 1
          },
          {
            "a": "T1210",
            "c": 0.4000000059604645,
            "d": "targets variable naming",
            "e": [
              "gates and security governance before apps reach production. All exploit code targets ",
              "\u003cdiv style=\"padding:12px 16px;background:#f0fdf4;border:1px solid #bbf7d0;border-radius:6px;'\n        'font-size:12px;color:#166"
            ],
            "i": "objectives/lateral-movement/exploit/scanner::targets-word",
            "l": 1,
            "el": [
              "6cd",
              "42c"
            ]
          },
          {
            "a": "T1204.002",
            "c": 0.8399999737739563,
            "d": "paid-user or subscription gate wording",
            "e": [
              "approval"
            ],
            "i": "objectives/execution/condition/remote-gate::paid-user-gate-wording",
            "l": 1,
            "m": "B0025"
          },
          {
            "a": "T1195.002",
            "c": 0.800000011920929,
            "d": "credential filename substring marker",
            "e": [
              "cred"
            ],
            "i": "objectives/supply-chain/impersonation/core-module::write-password-file--rx-4",
            "l": 1
          },
          {
            "a": "T1068",
            "c": 0.6000000238418579,
            "d": "Proof of concept reference",
            "e": [
              "proof-of-concept"
            ],
            "i": "objectives/privilege-escalation/exploit/vulnerabilities::poc-ref",
            "l": 3
          },
          {
            "a": "T1497",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "sandbox"
            ],
            "i": "objectives/anti-analysis/sandbox-detect/script::cwd-sandbox-keyword-check--rx-21",
            "l": 1,
            "m": "B0007"
          },
          {
            "c": 0.9399999976158142,
            "d": "Observability dashboard wording",
            "e": [
              "DASHBOARD"
            ],
            "i": "micro-behaviors/data/text/app::observability-dashboard-context",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "CVE pattern (6+ occurrences)",
            "e": [
              "CVE-2024-5830"
            ],
            "i": "micro-behaviors/data/text/security/threat-intel::cve-pattern-many",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "File has 30 or more lines",
            "e": [
              "text.total_lines = 284.00"
            ],
            "i": "metadata/file/text/metrics::file-has-30-plus-lines",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "credential keyword",
            "e": [
              "credential"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::credential",
            "l": 1
          },
          {
            "c": 0.9399999976158142,
            "d": "OpenClaw agent context",
            "e": [
              "AI agents"
            ],
            "i": "micro-behaviors/data/text/app::openclaw-agent-context",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "exploit keyword",
            "e": [
              "exploit"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::exploit",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "webhook vocabulary word",
            "e": [
              "webhooks"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::webhook-service-word",
            "l": 1
          },
          {
            "c": 0.9200000166893005,
            "d": "Security advisory source identifiers",
            "e": [
              "CISA"
            ],
            "i": "micro-behaviors/data/text/security/threat-intel::advisory-source-identifiers",
            "l": 1
          },
          {
            "c": 0.8600000143051147,
            "d": "Project or workspace deletion target",
            "e": [
              "workspace"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::target-project",
            "l": 1
          },
          {
            "c": 0.6000000238418579,
            "d": "payload keyword",
            "e": [
              "payload"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::payload",
            "l": 1
          },
          {
            "a": "T1497",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "sandbox"
            ],
            "i": "objectives/anti-analysis/sandbox-detect/script::hostname-sandbox-keyword-check--rx-3",
            "l": 1,
            "m": "B0007"
          },
          {
            "c": 1.0,
            "d": "Python source file extension (.py only)",
            "e": [
              "_10_summary.py"
            ],
            "i": "metadata/file/extension::python-source-extension",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "secret keyword",
            "e": [
              "secret"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::secret",
            "l": 1
          },
          {
            "a": "T1497",
            "c": 0.8999999761581421,
            "d": "Regex component marker",
            "e": [
              "sandbox"
            ],
            "i": "objectives/anti-analysis/sandbox-detect/script::hostname-in-sandbox-list--rx-11",
            "l": 1,
            "m": "B0007"
          },
          {
            "c": 0.800000011920929,
            "d": "\"ai agent\" identity",
            "e": [
              "ai agent"
            ],
            "i": "micro-behaviors/data/text/llm/action::llm-agent-identity-ai-agent",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "flex word",
            "e": [
              "flex"
            ],
            "i": "objectives/impact/infect/lexicon::flex-word",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Python file extension",
            "e": [
              "_10_summary.py"
            ],
            "i": "metadata/file/extension::py",
            "l": 2
          },
          {
            "a": "T1210",
            "c": 0.6000000238418579,
            "d": "CVE identifier in code",
            "e": [
              "CVE-2026-2441",
              "CVE-2026-33107",
              "CVE-2024-5830",
              "CVE-2026-2796",
              "CVE-2024-9680"
            ],
            "i": "objectives/lateral-movement/exploit/scanner::cve-reference",
            "l": 1,
            "el": [
              "1351",
              "1cc7",
              "bfd",
              "1eaf",
              "2738"
            ]
          },
          {
            "c": 0.8399999737739563,
            "d": "password/token/api_key field keyword",
            "e": [
              "token"
            ],
            "i": "micro-behaviors/data/text/keywords/credential::credential-field",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Python artifact file extension (py/pyi/pyc)",
            "e": [
              "_10_summary.py"
            ],
            "i": "metadata/file/extension::python-artifact-extension",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "scanner word",
            "e": [
              "scanner"
            ],
            "i": "objectives/impact/infect/lexicon::scanner-word",
            "l": 1
          },
          {
            "a": "T1057",
            "d": "Browser app firefox",
            "e": [
              "Firefox"
            ],
            "i": "micro-behaviors/process/enumerate/apps::browser-apps-firefox",
            "l": 2,
            "m": "E1592"
          },
          {
            "c": 0.30000001192092896,
            "d": "token keyword",
            "e": [
              "token"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::token",
            "l": 1
          },
          {
            "c": 0.4000000059604645,
            "d": "cmd/command/result vocabulary word",
            "e": [
              "command"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::command-result-word",
            "l": 1
          },
          {
            "c": 0.8799999952316284,
            "d": "Codebase deletion target",
            "e": [
              "code"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::target-codebase",
            "l": 1
          },
          {
            "d": "OAuth protocol reference",
            "e": [
              "OAuth"
            ],
            "i": "micro-behaviors/communications/http/oauth::oauth-protocol-reference",
            "l": 3
          },
          {
            "c": 0.8799999952316284,
            "d": "Source or test deletion target",
            "e": [
              "source code"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::target-source-test",
            "l": 1
          },
          {
            "c": 0.20000000298023224,
            "d": "command keyword",
            "e": [
              "command"
            ],
            "i": "micro-behaviors/data/text/keywords/lexicon::command-dup",
            "l": 1
          },
          {
            "d": "catch handler keyword",
            "e": [
              "catch"
            ],
            "i": "metadata/package/error-handling::catch-keyword",
            "l": 2,
            "el": [
              "36ba"
            ]
          },
          {
            "d": "OAuth keyword/reference",
            "e": [
              "oauth"
            ],
            "i": "micro-behaviors/communications/http/oauth::oauth-keyword-reference",
            "l": 3
          },
          {
            "a": "T1027",
            "c": 0.800000011920929,
            "d": "High entropy source string literals",
            "e": [
              "strings.avg_entropy = 4.10"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/source::high-entropy-strings",
            "l": 3,
            "m": "B0032"
          },
          {
            "a": "T1068",
            "c": 0.800000011920929,
            "d": "References a CVE identifier",
            "e": [
              "CVE-2024-5830"
            ],
            "i": "objectives/privilege-escalation/exploit/vulnerabilities::cve-mention",
            "l": 1
          },
          {
            "a": "T1204",
            "c": 0.699999988079071,
            "d": "Worm malware type reference",
            "e": [
              "worm"
            ],
            "i": "micro-behaviors/data/text/malware/terms::worm-marker",
            "l": 3
          },
          {
            "c": 0.4000000059604645,
            "d": "Firefox browser name marker",
            "e": [
              "Chrome / Firefox Vulnerability Analysis",
              "\u003cdiv style=\"padding:16px 18px;background:#eff6ff;border:1px solid #bfdbfe;border-radius:8px;'\n        'font-size:13px;color:#1e4",
              "\u003ctable style=\"width:100%;border-collapse:collapse;font-size:13px;margin-bottom:16px\"\u003e'\n        '\u003ctr style=\"border-bottom:2px sol",
              "\u003cli\u003e\u003cb\u003e17 CVEs reproduced\u003c/b\u003e across Chrome and Firefox (2024\u0026ndash;2026), with 13 achieving ",
              "code execution), spanning Chrome and Firefox 2024-2026.\u003c/td\u003e\u003c/tr\u003e",
              "Enforce minimum browser versions for workspace access. \"\n         \"The exploit window between patch release and enterprise rollo",
              "through manual exploitation testing. Firefox 148 shipped 46 CVEs, with 15+ found by ",
              "automated Firefox source code review. All AI-discovered CVEs were independently validated ",
              "Firefox ESR) reduce this window from weeks to hours."
            ],
            "i": "micro-behaviors/data/text/keywords/browser::firefox-name",
            "l": 1,
            "el": [
              "4fb5",
              "1eaf",
              "bfd",
              "2179",
              "1256",
              "3fda",
              "24fc",
              "2497",
              "40ca"
            ]
          }
        ],
        "sha": "580e0472c978d9f542174424cf62a99c40e1dcb8ce215d5b7dcfb2d62ffb9bbe",
        "path": "_10_summary.py",
        "type": "python"
      }
    ],
    "tv": "35641"
  }
}