Archive
Research archive, page 8
Page 8 of 159 published articles on AI security, application security, supply chain, and real attack chains.
Breaking MCP Authentication: How a Single Line of Code Exposes an Entire Legal Database
Eresus Security discovers a critical authentication bypass in yargi-mcp, a popular open-source MCP server for Turkish legal databases. A single...
What is a Vector Database? Its Role in AI and LLM Security
Vector database security guide for AI and RAG: embeddings, metadata filters, tenant isolation, data poisoning, retrieval authorization, deletion, and audit logs.
What is AI Security? A Complete Enterprise Blueprint for Securing Machine Learning Ecosystems
A deep dive into the complex world of AI Security. Understand the mechanics behind data poisoning, adversarial ML evasion, and prompt injection attacks...
Vercel, Context.ai, and AI SaaS Security
Eresus analyzes the April 20, 2026 Vercel incident linked to Context.ai and explains why OAuth-connected AI tools now belong in the core SaaS attack surface.
Structuring and Securing AI Microservices in Python (FastAPI)
Why must you transition from monolithic setups to a microservices architecture when exposing AI models to the public? Designing attack-resistant Python...
SAST vs DAST vs IAST: What Each Testing Type Actually Misses
SAST reads the source, DAST probes the running application, IAST instruments it from inside. Where each one finds bugs, where each one goes blind, and what a release gate actually needs.
Why Should We Use Rust for AI-Powered Backend Systems?
When AI assistants are writing half your code, how do you ensure system security? Discover the superiority of the Rust language and its Memory Safety...
Penetration Testing Pricing in 2026: Cost Factors & Budget Guide
A comprehensive 2026 guide to penetration testing costs. Learn exactly how pricing is determined for web, mobile, and network security assessments.
Hacking Humans: Social Engineering and the Psychology
Social engineering engagements are the most exciting and heart pumping. It doesn’t begin at the badge reader or the front desk. The access occurs when someone makes a decision.