Every marker is a published Human-Level signal with its sources, timestamps, and how precisely its location is known. The Observatory shows what has been reviewed and published, not everything that is happening.
Stale data
Data as of
11 Nov 2026, 12:47 UTC
Source freshness
Stale data
Last source check
11 Nov 2026, 12:15 UTC
Update check
Checking…
Updates are checked periodically; new signals appear within minutes of being published, after editorial review or an automated check. Live streaming is not configured on this host.
Coverage: 44 signals: 42 reviewed by editors, 2 published automatically after an AI check. 5 sources are monitored for new items; each is checked before it is published. This is a curated selection, not a complete record of global events.
Loading map…
Legend
AISignal at a known city or public site
AIApproximate location (region or country) — not an exact site
3Several signals nearby; select to zoom in
AI AI Risk
Bi Biosecurity
Cy Cyber Warfare
Co Cognitive Manipulation
Su Surveillance State
En Energy Systems
Ev Environment
Tr Transhumanism
Colour and two-letter codes show the domain. Markers do not encode severity or confidence; there is no published scoring method for either.
Cyber Warfare
Threat actors use agentic AI tooling to find and abuse exposed secrets
In a Microsoft Security Blog post dated 5 November 2026, titled "Threat actors use agentic AI tooling to find and abuse exposed secrets", Microsoft Threat Intelligence and Microsoft Security Research describe threat actors using ARTEX, an agentic AI offensive framework, to search for secrets across multiple repositories, observed from August 2026. The post says that as early as 28 October 2026 an agentic framework used "valid leaked or stolen application credentials to access Microsoft Entra ID tenants of certain organizations", with sign-ins across dozens of applications and multiple tenants. It describes one observed case in which an AI agent went from scanning GitHub for secrets to exfiltrating data from Azure Key Vault in five minutes. It says removing the original disclosure alone does not remediate the exposure. The post names no country or state. The post has a heading "Storm-0940 ARTEX-driven attacks", but its text does not tie the credential campaign to Storm-0940 by name, and it makes no state attribution. These are Microsoft's own observations, company-reported and not independently verified.
Source-reported fact
Primary source
Location
Not established · Location unknown
Event time
Unknown
Source published
Unknown
Last updated
11 Nov 2026, 06:08 UTC · revision 5
Loading evidence…
All matching signals (44)
Mapped signals (9)
Location not established (not shown on the map) (35)
How this map works
What appears
Signals an editor has reviewed and published, and items from monitored official sources that passed an automated AI check, which are labelled “Published automatically”. Each one cites at least one public source, or is labelled as editorial analysis with its methodology. Withdrawn signals are removed.
Locations
We use the least precise location that is still useful. Dashed markers are approximate (region or country) and do not mark an exact site. Signals without an established location are listed but not pinned. We do not map personal locations.
Timestamps
Event time, source publication time, and the time we retrieved a source are shown separately. Missing values are shown as unknown, never guessed.
Freshness and updates
The page checks for new data every minute. Source freshness is reported on its own: a working update check does not mean the sources are current. New signals appear after review and a site release.
No scores
Markers do not encode severity or confidence. Evidence is described qualitatively (for example “single source” or “multiple independent sources”) with a written rationale.
Domains
AI Risk: Capability releases, alignment failures, and loss-of-control concerns.
Biosecurity: Synthetic biology, pathogens, and dual-use life-science developments.
Cyber Warfare: Offensive AI, autonomous weapons, and attacks on critical infrastructure.
Cognitive Manipulation: Information operations, synthetic media, and psychological influence.
Surveillance State: State and corporate surveillance infrastructure and governance.
Energy Systems: Grid fragility, compute energy demand, and resource competition.
Environment: Climate tipping points, geoengineering, and ecological systems.
Transhumanism: Human augmentation, neurotechnology, and brain-computer interfaces.
Basemap: Natural Earth 1:110m countries (public domain).
