Archive
Research archive, page 12
Page 12 of 159 published articles on AI security, application security, supply chain, and real attack chains.
Joblib Model Suspicious Code Execution Detected at Model Load Time
Identifies suspicious execution sequences during a Joblib model load indicating potentially obstructed deserialization threats.
GGUF Model Template Containing Arbitrary Code Execution Detected
GGUF formats using raw Jinja templates without sandboxing are susceptible to arbitrary code execution attacks. Always use isolated environments for...
GGUF Metadata Parsing Flaws (Llama.cpp Buffer Overflows)
Identifies highly critical buffer overflow attacks manipulating the internal metadata and vocabulary tensors of GGUF files to exploit C++ parsers like...
Automated Red Teaming for Agentic AI Workflows: What to Test and What to Measure
A practical framework for testing prompt injection, tool abuse, data exposure, excessive agency, and recovery in enterprise agent workflows.
Extraction-Triggered Environment Override (Path Overwriting)
An advanced attack where a malicious model archive weaponizes extraction processes to overwrite critical environment-level objects, seizing control of...
AI Security Testing for GenAI Applications: From Prompt Tests to Runtime Controls
A practical guide to assessing GenAI applications, agent permissions, RAG data flows, prompt injection, output handling, and runtime evidence.
Execution of Arbitrary Code via Model Config Architecture Targets
Identifying advanced threats where malicious executables are obfuscated as configuration objects inside an ML model archive, triggering Remote Code...
Joblib / Scikit-Learn Arbitrary Code Execution (ACE)
Identifies insecure object deserialization attacks utilizing the popular Scikit-Learn Joblib persistency library, granting attackers remote execution...
Llama 4 Security Assessment: Scout vs. Maverick Deployment Risks
How to assess Llama 4 Scout and Maverick in a real application: model safeguards, prompt injection, output validation, local deployment, and supply-chain controls.