<svg xmlns="http://www.w3.org/2000/svg" width="1400" height="820" viewBox="0 0 1400 820"><rect class="bg" width="100%" height="100%"/><style>.bg{fill:#090b10}.panel{fill:#11151d;stroke:#2a3240;stroke-width:2}.title{font:700 42px Arial;fill:#f7f8fb}.sub{font:400 20px Arial;fill:#aeb8c8}.h{font:700 24px Arial;fill:#fff}.t{font:400 18px Arial;fill:#d3d9e4}.small{font:400 15px Arial;fill:#94a1b5}.accent{fill:#ffcf5a}.red{fill:#ff6b6b}.green{fill:#6ee7a8}.line{stroke:#657188;stroke-width:3;fill:none}.dash{stroke:#657188;stroke-width:3;stroke-dasharray:8 8;fill:none}</style><text x="70" y="90" class="title">RECONSTRUCTED ATTACK PATH</text><text x="70" y="130" class="sub">Confirmed high-level stages from first-party disclosures</text><rect x="70" y="220" width="230" height="150" rx="20" class="panel"/><text x="105" y="280" class="h">Eval sandbox</text><text x="105" y="320" class="small">reduced refusals</text><path d="M300 295 H390" class="line"/><rect x="400" y="220" width="230" height="150" rx="20" class="panel"/><text x="435" y="270" class="h">Proxy zero-day</text><text x="435" y="315" class="small">package cache</text><path d="M630 295 H720" class="line"/><rect x="730" y="220" width="230" height="150" rx="20" class="panel"/><text x="770" y="270" class="h">Internet node</text><text x="770" y="315" class="small">lateral movement</text><path d="M960 295 H1050" class="line"/><rect x="1060" y="220" width="270" height="150" rx="20" class="panel"/><text x="1095" y="270" class="h">HF production</text><text x="1095" y="315" class="small">credentials + RCE path</text><rect x="180" y="520" width="1040" height="110" rx="18" fill="#151b25" stroke="#657188" stroke-width="2"/><text x="230" y="570" class="h">Do not infer the missing exploit details</text><text x="230" y="605" class="small">The companies have not published full vulnerabilities, IoCs, or a complete forensic report.</text></svg>