Skip to content
Dreadnode Dreadnode Dreadnode

September 10, 2026

Traditional ML attack targets now available across all organizations

← All updates

Traditional ML attack targets now available across all organizations

6 new 10 improved 10 fixed

Three traditional ML attack targets ship this week alongside a full set of capability and TUI fixes that bring extraction, membership inference, and model inversion attacks to parity across the SDK and TUI.

New

  • Traditional ML attack targets. Three public targets — fraud tabular, MNIST image, and IMDB text — are now available across all organizations covering extraction, membership inference, evasion, and inversion attack types, provisionable by name via the SDK or TUI.
  • In-app Release Notes. A Release Notes section in Account Settings lists the ten most recent changelog entries with links to the full docs, on both SaaS and self-hosted installs.
  • Capability credential requirements shown before install. The capability detail view and install picker now display which credentials a capability requires before you commit to installing it.
  • TUI light theme. Set DREADNODE_TUI_THEME=light to switch the TUI from its default dark palette to a light theme.
  • /reload slash command in chat. A /reload command is now available in chat sessions to reload the current agent without leaving the session.
  • Status page link in account settings. The Support tab in Account Settings now includes a direct link to the system status page on SaaS deployments.

Improvements

  • Runtime cold start cut by more than 60%. A combination of lock scope reduction, litellm pre-warming, and template bytecode precompilation drops runtime time-to-ready from 18.8 s to 6.6 s and eliminates the serialization bottleneck that affected concurrent cold starts.
  • AIRT assessments and findings show who ran them. AI red-teaming assessments and findings now display the workspace member who ran each assessment, matching the attribution already visible on evaluations.
  • /transcript command in the TUI. A new /transcript command lets you toggle between compact and full agent transcript views, matching what the web UI shows.
  • Bulk workspace member addition. You can now select and add multiple members to a workspace at once from the workspace settings page.
  • AI red-teaming agent resolves bare task names. The agent now resolves bare task names (e.g. ml-extraction-fraud-tabular) across all orgs you have access to, eliminating 404s when provisioning environments from the public catalog.
  • Session sharing attribution. Session responses now include who shared a session with the workspace and when, covering all share paths including bulk promotion and creation-time visibility.
  • AI red-teaming docs refreshed. The getting-started guide and reference docs have been updated with corrected model strings, an expanded attack reference, and a rewritten first-campaign walkthrough.
  • Invite member dialog improved. The invite member flow has been updated with a cleaner, more reliable UI for adding members to your organization.
  • Message count labels in chat session list. Each session in the chat session list now displays a message count.
  • workspace_mount runtime option deprecated. The workspace_mount option is now a no-op; /home/user/workspace is ordinary sandbox-local storage, and object-storage access continues through the SDK as before.

Fixes

  • TUI transcript scrolling is smooth. Trackpad flicks on Ghostty, Kitty, and WezTerm no longer produce multi-viewport jumps or stalls — worst-frame jump drops 20x and is bounded to under one viewport.
  • Transcript copying works in the TUI. Selecting and dragging over assistant messages and tool output now copies the visible text correctly, with command output rejoining wrapped lines and preserving indentation.
  • Traditional ML attack dashboards show correct metrics. Evasion, extraction, membership inference, and inversion attack runs now report accurate trial counts and per-target goal totals instead of zero trials and collapsed goal counts.
  • Sandbox WebSocket disconnection fixed. Chat turns no longer fail with “Runtime websocket closed (1006)” after a pause longer than ~60 seconds between messages.
  • dn --resume no longer crashes for out-of-scope sessions. Resuming a session that belongs to a project outside the active scope now works correctly instead of raising a traceback.
  • Extraction, membership inference, and model inversion attacks work in the TUI. These attack types now behave consistently between the TUI agent and the SDK, including a new model inversion tool and correct handling of empty data pools.
  • Sandbox environments torn down on assessment completion. Provisioned sandbox environments are now stopped automatically when an AI red-teaming assessment finishes, preventing billable sandbox time from running until the platform TTL.
  • dreadnode env provision alias and bare task name resolution. provision is now accepted as an alias for create, and bare public task names resolve without requiring an org prefix.
  • TUI paste placeholder identity preserved across undo and edits. Undoing a deleted paste placeholder restores the correct pasted content, and selection-deleting one of two identical placeholders no longer corrupts the surviving one.
  • Organization member count no longer shows zero. Organization pages now display the correct active member count.