EresusSecurity

Archive

Research archive, page 14

Page 14 of 159 published articles on AI security, application security, supply chain, and real attack chains.

Guide

Cybersecurity for SMBs: A 5-Step Defense Strategy for Growing Teams

How can Small and Medium-Sized Businesses (SMBs) protect themselves from ransomware and data breaches on a tight budget? 5 actionable security steps.

2026-04-06Read
NewsAI Infrastructure

The April 2026 MCP RCE Wave

Why MCP security depends on architecture, identity, tool isolation, and registration control more than a single CVE.

2026-04-22Read
GuideMethodologyNIST Cybersecurity Framework 2.0

How Often Should You Penetration Test? (Scrapping the Annual Audit Myth)

How frequently does your company need a penetration test? Why the traditional 'once-a-year' pentest is actively putting modern software infrastructure...

2026-08-11Read
AI Security

Critical Vulnerabilities in AI Frameworks (GGUF & MXNet): The Heap Overflow Threat

Model compression standards like GGUF make running LLMs easy, but are they secure? Discover how malicious model files induce memory and heap overflows...

2026-04-01Read
GuideDevSecOpsNIST Secure Software Development Framework

Legacy SAST vs. AI-Powered Code Analysis: The Future of AppSec

SAST vs AI code analysis: where deterministic rules, data-flow analysis, LLM assistance, verification, false positives, and DevSecOps release gates fit together.

2026-08-11Read
Guide

The Legal Mandate of Penetration Testing in GDPR and Data Privacy Compliance

Is penetration testing legally mandatory under GDPR or similar privacy laws? Discover what regulators actually demand to avoid catastrophic compliance...

2026-04-05Read
AI Security

AI Compliance Crisis: Navigating GDPR/KVKK in RAG Architectures

Discover the severe data privacy risks of Enterprise RAG models. Learn how to align Large Language Models with GDPR mandates like the 'Right to be...

2026-04-14Read
ResearchEnterprise SecurityNVD CVE-2026-35616

Technical Analysis of Fortinet CVE-2026-35616: Actively Exploited API Vulnerability

FortiClient EMS CVE-2026-35616 analysis: affected versions, improper access control, active-exploitation response, patch validation, isolation, logging, and credential rotation.

2026-08-11Read
GuideFintech SecurityOWASP API Security Top 10

API Security in Fintech Applications: Why WAFs Are Never Enough

Today, the digital lifeblood connecting banking software, crypto wallets, open banking integrations, and payment gateways is the API (Application...

2026-08-11Read