Eresus research, advisory, and security news
We collect writing, advisories, and current-event analysis around AI security, the MCP ecosystem, application security, and real attack chaining here.
Latest Posts
Building a Zero Trust Architecture for Enterprise AI and LLM Deployment
Why integrating an LLM requires strict micro-segmentation. Learn how to construct a Zero Trust framework to prevent GenAI from becoming an internal...
Breaking MCP Authentication: How a Single Line of Code Exposes an Entire Legal Database
Eresus Security discovers a critical authentication bypass in yargi-mcp, a popular open-source MCP server for Turkish legal databases. A single...
Critical RCE Vulnerability in Legacy Enterprise Gateway
Critical Remote Code Execution (RCE) vulnerability in a legacy enterprise API gateway allowing unauthenticated root access.
What is a Vector Database? Its Role in AI and LLM Security
Vector database security guide for AI and RAG: embeddings, metadata filters, tenant isolation, data poisoning, retrieval authorization, deletion, and audit logs.
What is AI Security? A Complete Enterprise Blueprint for Securing Machine Learning Ecosystems
A deep dive into the complex world of AI Security. Understand the mechanics behind data poisoning, adversarial ML evasion, and prompt injection attacks...
Vercel, Context.ai, and AI SaaS Security
Eresus analyzes the April 20, 2026 Vercel incident linked to Context.ai and explains why OAuth-connected AI tools now belong in the core SaaS attack surface.
Structuring and Securing AI Microservices in Python (FastAPI)
Why must you transition from monolithic setups to a microservices architecture when exposing AI models to the public? Designing attack-resistant Python...
The Alphabet of AppSec: Understanding the Difference Between SAST, DAST, and IAST
Confused by AppSec acronyms? Discover the core differences between SAST, DAST, and IAST to understand which testing methodology best secures your...
Why Should We Use Rust for AI-Powered Backend Systems?
When AI assistants are writing half your code, how do you ensure system security? Discover the superiority of the Rust language and its Memory Safety...