Release 4.9.1

Author: keithmanville

CHANGELOG.md

@@ -1,5 +1,9 @@
 # ATLAS Website Changelog
 
+## [4.9.1]() (2025-01-08)
+
+- Fixed errors in 4.9.0 release notes.
+
 ## [4.9.0]() (2025-12-24)
 
 - Updated ATLAS data to [version 5.2.0](https://github.com/mitre-atlas/atlas-data/blob/main/CHANGELOG.md#520-2025-12-24)

package.json

@@ -1,7 +1,7 @@
 {
   "name": "atlas-website",
   "type": "module",
-  "version": "4.9.0",
+  "version": "4.9.1",
   "private": true,
   "scripts": {
     "build": "run-p type-check \"build-only {@}\" --",

public/content/update-files/2025-12.md

@@ -5,13 +5,15 @@ It includes a large update to existing mitigations, adding missing links to adve
 It also continues to add new adversary techniques targeting agentic AI systems.
 
 The ATLAS knowledge base is built from community contributions. We want to acknowledge the following for their contributions for this release:
-- The members of the [Center for Threat-Informed Defense](https://ctid.mitre.org/) (CTID) [Secure AI](https://ctid.mitre.org/projects/secure-ai/) project for contributing to mitigations ane feedback on new case studies and techniques.
+- The members of the [Center for Threat-Informed Defense](https://ctid.mitre.org/) (CTID) [Secure AI](https://ctid.mitre.org/projects/secure-ai/) project for contributing to mitigations and feedback on new case studies and techniques.
 - Zenity for contributing new adversary techniques and a case study targeting agentic systems:
   - [AI Service API](/techniques/AML.T0096)
   - [AI Agent Tool Credential Harvesting](/techniques/AML.T0098)
   - [AI Agent Tool Data Poisoning](/techniques/AML.T0099)
+  - [AI Agent Clickbait](/techniques/AML.T0100)
+  - [Data Destruction via AI Agent Tool Invocation](/techniques/AML.T0101)
   - [SesameOp: Novel backdoor uses OpenAI Assistants API for command and control](/studies/AML.CS0042)
-- US Bank (Joe Gumke and Dragan Damjanovic) and Vijay Lalwani (x_id: @VijayV_Lalwani for submitting [Malware Prototype with Embedded Prompt Injection](/studies/AML.CS0043)
+- US Bank (Joe Gumke and Dragan Damjanovic) and Vijay Lalwani (x_id: @VijayV_Lalwani) for submitting [Malware Prototype with Embedded Prompt Injection](/studies/AML.CS0043)
 - US Bank (Joe Gumke and Dragan Damjanovic) for updates to [Obtain Capabilities: Generative AI](/techniques/AML.T0016.002)
 - Ishan Dani for updates to [LLM Prompt Obfuscation](/techniques/AML.T0068)
 - Fujitsu Research of Europe for updates to [Prompt Infiltration via Public-Facing Application](/techniques/AML.T0093)