{"schema":"sb.node.v1","id":"sb:e/fdfc3bf0545e6d120cca48a1","kind":"entity","label":{"text":"cisa","locale":"en"},"identity":{"anchor":"label:en:cisa","strength":"label"},"asOf":{"knowledgeCutoff":"2026-11-03T13:08:56.552092+00:00","releaseId":"sb-dbff8ce02881","snapshot":"deploy dccfd267181b1edc684d10eb59796f07a3cc2fa9"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":432,"separatePublishers":78,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim","receiptsOnTopic":{"state":"partial","share":0.312,"named":135,"of":432,"basis":"documents whose own title or summary lead names the subject, over every counted document that mentions it anywhere (the entity graph's measurement); receipts are drawn only from rows whose own title or URL names the subject (the entity graph's subject gate)","blind":["only 31% of the 432 documents measured name the subject in their own text; the rest mention it in passing, so standing.evidence.supporting overstates coverage about it"]}},"admission":{"state":"canonical","kind":"legacy","kindBasis":"promoted-before-receipts","reason":"entity graph provenance 'curated'; promoted from the corpus by the machine rule before promotion receipts were written (2026-10-02); no receipt exists and none is invented","policy":"promotion (admitted before receipts existed; no receipt)","admittedOn":"2026-08-18"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-07-26","to":"2026-11-03","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","blind":["assertion coverage 0.069: about 93% of mentions carry no typed assertion"]}},"dimensions":{"domains":["cybersecurity"],"activeDays":63,"assertions":{}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":9,"byKind":{"observation":9},"withheld":{"state":"withheld","count":3,"reason":"3 receipts withheld: no source link (the same rule the topic record applies)"},"items":[{"id":"sb:o/ab9b6bd8f58b64afd7c1a963","kind":"observation","label":"Federal News Network · 2026-10-30 · ‘Dangerous:’ CISA official criticizes company’s decision to release PHP bug early","url":"https://federalnewsnetwork.com/cybersecurity/2026/10/dangerous-cisa-official-criticizes-companys-decision-to-release-php-bug-early/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/9edef9b70b154f6f6ca6f779","kind":"observation","label":"Rescana · 2026-10-30 · Linux Kernel Fragnesia CVE-2026-46300 in CISA KEV: Local Root Flaw Chained With PHP2Shell","url":"https://www.rescana.com/post/linux-kernel-fragnesia-cve-2026-46300-xfrm-esp-tcp-privilege-escalation-kev","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/28c2c12160cb15723cda1f39","kind":"observation","label":"Rescana · 2026-10-30 · Cisco Secure Firewall ASA and FTD CVE-2026-76418: Exploited SSL VPN DoS Flaw Added to CISA KEV","url":"https://www.rescana.com/post/cisco-secure-firewall-asa-ftd-cve-2026-76418-ssl-ra-vpn-dos-kev","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/739386cca050ed75df6fa014","kind":"observation","label":"BleepingComputer · 2026-10-30 · CISA says max severity GitLab flaw now exploited in the wild","url":"https://www.bleepingcomputer.com/news/security/hackers-now-exploiting-max-severity-gitlab-flaw-in-attacks/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/bfa2d72f372ea76d2fcdd51d","kind":"observation","label":"The Hacker News · 2026-10-30 · CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV","url":"https://thehackernews.com/2026/10/cisa-adds-actively-exploited-gitlab-rce.html","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/23fb12d651c03a389450f64b","kind":"observation","label":"Rescana · 2026-10-29 · VMware ESX CVE-2026-41709: Low-Rated Logging Flaw Now in CISA KEV After Zero-Day Use","url":"https://www.rescana.com/post/vmware-esx-cve-2026-41709-insufficient-logging-kev","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/31a17d675d211cb4dafd47f2","kind":"observation","label":"MarketScale News · 2026-10-29 · The Early Scale: CISA mandates PHP2Shell patches this week","url":"https://www.marketscale.com/industries/business-services/the-early-scale-2026-10-29","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/fcc397fa881dfb18bed03fdb","kind":"observation","label":"BleepingComputer · 2026-10-29 · CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks","url":"https://www.bleepingcomputer.com/news/security/cisa-warns-of-fragnesia-linux-flaw-chained-in-php2shell-attacks/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/121a39c1e3c27a44fe695eba","kind":"observation","label":"TechInformed · 2026-10-29 · CISA adds rule to block high-risk AI agents in Microsoft 365","url":"https://techinformed.com/cisa-adds-rule-to-block-high-risk-ai-agents-in-microsoft-365/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}}],"cursor":null,"order":"newest first; we keep the 9 newest receipts for this entity whose own title or URL (the entity graph's subject gate) names it; each says which in match. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":11,"byKind":{"claim":1,"co-mentioned":10},"items":[{"id":"sb:p/99b9f1da40d1ad8c1027b918","kind":"claim","label":"Linux Kernel Fragnesia CVE-2026-46300 in CISA KEV: Local Root Flaw Chained With PHP2Shell — single source","role":"named-in","relationKind":"claim","members":1},{"kind":"relation","label":"co-mentioned with ai (192 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/479a64c5a716ffadbc508194"},{"kind":"relation","label":"co-mentioned with infrastructure security agency (177 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/2d20907df11ec0106439e635"},{"kind":"relation","label":"co-mentioned with known exploited vulnerabilities (145 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/a70037dba867b3ed2e7108cc"},{"kind":"relation","label":"co-mentioned with cvss (125 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/374187f0a823ec024dd62a68"},{"kind":"relation","label":"co-mentioned with china (98 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/82dcb9f278990ec6fc2999c2"},{"kind":"relation","label":"co-mentioned with remote code execution (88 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/a60801e2a1ac996803a0d1b3"},{"kind":"relation","label":"co-mentioned with microsoft (74 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/04d704b216e27c58bffc0ecb"},{"kind":"relation","label":"co-mentioned with anthropic (66 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/35082d49aba09a50c1c4cd6f"},{"kind":"relation","label":"co-mentioned with linux (65 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/b86f5abb811441d65eb0c5a1"}],"cursor":"c1.eyJpZCI6InNiOmUvZmRmYzNiZjA1NDVlNmQxMjBjY2E0OGExIiwibCI6InJlbGF0aW9ucyIsIm8iOjEwLCJrIjpudWxsLCJhIjoiMjAyNi0xMS0wM1QxMzowODo1Ni41NTIwOTIrMDA6MDAifQ","order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/fdfc3bf0545e6d120cca48a1","mcp":"traverse {\"id\":\"sb:e/fdfc3bf0545e6d120cca48a1\"}","page":"/entity/cisa/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/fdfc3bf0545e6d120cca48a1\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/fdfc3bf0545e6d120cca48a1\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"free-record","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/fdfc3bf0545e6d120cca48a1\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"free-record","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/fdfc3bf0545e6d120cca48a1\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"free-record","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history, which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"free-record","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"free-record","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"watch","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"watch","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"watch","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"watch","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"one-time-read","reason":"one-time Reads are not offered through this door; use ask"}]}