Eresus research, advisory, and security news
We collect writing, advisories, and current-event analysis around AI security, the MCP ecosystem, application security, and real attack chaining here.
Latest Posts
Copy Fail CVE-2026-31431: Linux Kernel Local Privilege Escalation
CVE-2026-31431 (Copy Fail) is a local privilege escalation vulnerability in the Linux kernel's algif_aead cryptographic interface. Affects kernels from 4.14 to 6.12.x across Ubuntu, RHEL, Debian, Amazon Linux, and more. Includes a kernel module workaround, container hardening steps, and a patch strategy for Kubernetes nodes and CI runners.
n8n-mcp Authenticated SSRF: Affected Versions, Patch, and Exposure Review (CVE-2026-39974)
CVE-2026-39974 affects n8n-mcp multi-tenant HTTP deployments through authenticated SSRF. Review the affected versions, vendor patch, and exposure response.
n8n-mcp Authenticated SSRF: Disclosure and Mitigation (CVE-2026-39974)
CVE-2026-39974 affects n8n-mcp multi-tenant HTTP deployments through authenticated SSRF. Review the affected versions, vendor patch, and mitigations.
The Limitations of WAF: Why Firewalls Alone Can't Prevent Hacks
Your company relies on a pricey WAF (Web Application Firewall) to block threats. But why is a WAF completely blind to logical flaws? Discover how manual...
Kubernetes (K8s) Penetration Testing Playbook: The Black Box Approach
How do cyber attackers breach your Kubernetes (K8s) clusters from the outside without prior knowledge? An in-depth look into Black Box Kubernetes...
The Overlooked Threat in AI Models: Keras & Pickle File Vulnerabilities
While everyone focuses on prompt injection, the biggest threat lies in the background: AI model files (Keras, Pickle) executing malicious code. Learn...
Forgotten Secrets in the Frontend: What Hackers Extract from JavaScript Files
API keys, passwords, and AWS credentials left behind in compiled client-side JavaScript files (React, Vue) are prime targets for cyber attackers. Learn...
The Silent Assassin of Modern APIs: BOLA / IDOR Vulnerabilities and Their Impact
Why does the undisputed leader of the OWASP API Top 10, Broken Object Level Authorization (BOLA/IDOR), constantly evade WAF and DAST scanners? Defending...
ERESUS-ADV-2026-002: Server-Side Request Forgery (SSRF) via Cloud Metadata Endpoints
Analysis of widespread SSRF vulnerabilities in cloud environments (AWS, GCP, Azure) exposing critical metadata endpoints and credentials.