Archive
Research archive, page 10
Page 10 of 159 published articles on AI security, application security, supply chain, and real attack chains.
PyTorch Model Arbitrary Code Execution Suspected at Model Load Time
PyTorch serialized objects detected with high-risk structural manipulation pointing towards concealed runtime commands.
TensorFlow SavedModel Execution Environment Extrapolation (RCE)
A runtime execution vulnerability capitalizing on inherent structural logic within the standardized TensorFlow SavedModel infrastructure, permitting...
File Corruption & Ransomware via Serialization Opcodes
Catastrophic cybersecurity alert indicating an ML artifact executes destructive local operations mimicking Ransomware upon load.
Environmental Data Exfiltration Initiated via Model Execution
Critical security threat characterizing an ML serialization object stealthily extracting operational secrets and API keys to third-party endpoints.
Interactive Reverse Shell Initiated from Model Persistence
Critical vulnerability characterized by a machine learning model initiating a reverse shell connection back to an attacker's C2 server during the model...
Poisoned Model Artifact Detected with Obfuscated Shell Injection
Critical security threat identifying complex obfuscation techniques nested inside malicious serialization binaries. Uncover how Eresus identifies these...
PyTorch Subverted Loading Mechanism Triggering ACE
Identifies hostile payloads manipulating the core PyTorch `torch.load()` functionality to bypass security parameters and execute unauthorized OS commands.
Python Pickle Arbitrary Code Execution Detected
Discover how Python's built-in Pickle serialization module enables severe Arbitrary Code Execution (ACE) vulnerabilities within machine learning...
ONNX Unsafe Attribute Parsing (Arbitrary Code Execution / DoS)
A severe vulnerability detecting weaponized ONNX models exploiting legacy internal processing loops—manipulating attributes and external data extraction...