EresusSecurity
Research & Intelligence

Eresus research, advisory, and security news

We collect writing, advisories, and current-event analysis around AI security, the MCP ecosystem, application security, and real attack chaining here.

Guide · 27News · 4Case Study · 3Research · 84Technical Guide · 2Advisory Analysis · 5Advisory · 2

Latest Posts

Runtime Threats

TorchScript Model Arbitrary Code Execution Detected at Model Load Time

Critical security vulnerability detailing explicit Remote Code Execution (RCE) occurrences triggered dynamically during TorchScript model initialization...

2026-04-10Read
Deserialization Threats

PyTorch Model Arbitrary Code Execution Suspected at Model Load Time

PyTorch serialized objects detected with high-risk structural manipulation pointing towards concealed runtime commands.

2026-04-27Read
Runtime Threats

TensorFlow SavedModel Execution Environment Extrapolation (RCE)

A runtime execution vulnerability capitalizing on inherent structural logic within the standardized TensorFlow SavedModel infrastructure, permitting...

2026-04-27Read
Deserialization Threats

File Corruption & Ransomware via Serialization Opcodes

Catastrophic cybersecurity alert indicating an ML artifact executes destructive local operations mimicking Ransomware upon load.

2026-04-27Read
Deserialization Threats

Environmental Data Exfiltration Initiated via Model Execution

Critical security threat characterizing an ML serialization object stealthily extracting operational secrets and API keys to third-party endpoints.

2026-04-27Read
Deserialization Threats

Interactive Reverse Shell Initiated from Model Persistence

Critical vulnerability characterized by a machine learning model initiating a reverse shell connection back to an attacker's C2 server during the model...

2026-04-27Read
Deserialization Threats

Poisoned Model Artifact Detected with Obfuscated Shell Injection

Critical security threat identifying complex obfuscation techniques nested inside malicious serialization binaries. Uncover how Eresus identifies these...

2026-04-27Read
Runtime Threats

PyTorch Subverted Loading Mechanism Triggering ACE

Identifies hostile payloads manipulating the core PyTorch `torch.load()` functionality to bypass security parameters and execute unauthorized OS commands.

2026-04-27Read
Deserialization Threats

Python Pickle Arbitrary Code Execution Detected

Discover how Python's built-in Pickle serialization module enables severe Arbitrary Code Execution (ACE) vulnerabilities within machine learning...

2026-04-10Read