Eresus research, advisory, and security news
We collect writing, advisories, and current-event analysis around AI security, the MCP ecosystem, application security, and real attack chaining here.
Latest Posts
CVE-2026-41940: Emergency Action Plan for cPanel & WHM Authentication Bypass
CVE-2026-41940 is a critical authentication bypass in cPanel & WHM affecting all versions after 11.40. Covers affected versions, patch commands, temporary firewall mitigations, session IOC checks, and a fleet action checklist for hosting teams.
Copy Fail CVE-2026-31431: Linux Kernel Local Privilege Escalation
CVE-2026-31431 (Copy Fail) is a local privilege escalation vulnerability in the Linux kernel's algif_aead cryptographic interface. Affects kernels from 4.14 to 6.12.x across Ubuntu, RHEL, Debian, Amazon Linux, and more. Includes a kernel module workaround, container hardening steps, and a patch strategy for Kubernetes nodes and CI runners.
What Is AWS IAM in Cloud Security?
Learn how AWS Identity and Access Management (IAM) controls access, prevents data breaches, and serves as the ultimate perimeter in modern cloud security.
Vercel, Context.ai, and AI SaaS Security
Eresus analyzes the April 20, 2026 Vercel incident linked to Context.ai and explains why OAuth-connected AI tools now belong in the core SaaS attack surface.
The April 2026 MCP RCE Wave
Why MCP security depends on architecture, identity, tool isolation, and registration control more than a single CVE.
AI Agent Traps: Web Attacks Against Agents
How hidden web content, poisoned context, and tool access can manipulate autonomous AI agents in real enterprise workflows.
Building a Zero Trust Architecture for Enterprise AI and LLM Deployment
Why integrating an LLM requires strict micro-segmentation. Learn how to construct a Zero Trust framework to prevent GenAI from becoming an internal...
What is AI Security? A Complete Enterprise Blueprint for Securing Machine Learning Ecosystems
A deep dive into the complex world of AI Security. Understand the mechanics behind data poisoning, adversarial ML evasion, and prompt injection attacks...
OWASP Top 10 for LLMs: The Definitive Guide to AI Vulnerabilities
Explore the official OWASP Top 10 for Large Language Models (LLMs). From Prompt Injection to Supply Chain Attacks, learn how to secure your enterprise...