OrcaRouter-The-AI-Threat-Report-2026.md

OrcaRouter Security Research's AI Threat Report 2026 maps the matured AI threat landscape: adoption has outpaced governance, enabling high-impact incidents such as zero-click exfiltration (EchoLeak), supply-chain/tool poisoning (GitHub MCP rug-pulls), and service-side leaks (ShadowLeak); it catalogs fourteen threat classes across content and action planes, analyzes repeatable kill chains, and prescribes a pragmatic zero-trust control stack (scoped agent identity, input/output guardrails, action firewall, anomaly detection and signed audit trails) plus a staged rollout and CISO roadmap to contain agentic AI risk.