Eresus Security Research Feed https://www.eresussec.com Research, advisories, and offensive security writing from Eresus Security. en-us Sat, 25 Apr 2026 12:26:22 GMT <![CDATA[What is AWS IAM and Why is it the First Line of Defense in Cloud Security?]]> https://www.eresussec.com/en/blog/aws-iam-first-line-of-defense-cloud-security https://www.eresussec.com/en/blog/aws-iam-first-line-of-defense-cloud-security Fri, 24 Apr 2026 00:00:00 GMT <![CDATA[What the Vercel and Context.ai Incident Changes for AI-Connected SaaS Security]]> https://www.eresussec.com/en/blog/vercel-context-ai-security-incident-analysis https://www.eresussec.com/en/blog/vercel-context-ai-security-incident-analysis Wed, 22 Apr 2026 00:00:00 GMT <![CDATA[The MCP RCE Wave of April 16–22, 2026: Why Architecture Now Matters More Than a Single CVE]]> https://www.eresussec.com/en/blog/mcp-rce-architecture-wave-april-2026 https://www.eresussec.com/en/blog/mcp-rce-architecture-wave-april-2026 Wed, 22 Apr 2026 00:00:00 GMT <![CDATA[AI Agent Traps and the Web: What Google DeepMind’s April 6, 2026 Research Means in Practice]]> https://www.eresussec.com/en/blog/ai-agent-traps-web-attacks-analysis https://www.eresussec.com/en/blog/ai-agent-traps-web-attacks-analysis Wed, 22 Apr 2026 00:00:00 GMT <![CDATA[Building a Zero Trust Architecture for Enterprise AI and LLM Deployment]]> https://www.eresussec.com/en/blog/zero-trust-architecture-for-ai-models https://www.eresussec.com/en/blog/zero-trust-architecture-for-ai-models Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[What is AI Security? A Complete Enterprise Blueprint for Securing Machine Learning Ecosystems]]> https://www.eresussec.com/en/blog/what-is-ai-security https://www.eresussec.com/en/blog/what-is-ai-security Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[OWASP Top 10 for LLMs: The Definitive Guide to AI Vulnerabilities]]> https://www.eresussec.com/en/blog/owasp-top-10-for-llm-vulnerabilities https://www.eresussec.com/en/blog/owasp-top-10-for-llm-vulnerabilities Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[The Art of LLM Jailbreaking: Demystifying Offensive Prompt Engineering]]> https://www.eresussec.com/en/blog/llm-jailbreaking-red-teaming-tactics https://www.eresussec.com/en/blog/llm-jailbreaking-red-teaming-tactics Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[AI Compliance Crisis: Navigating GDPR/KVKK in RAG Architectures]]> https://www.eresussec.com/en/blog/gdpr-kvkk-compliance-for-rag-ai-models https://www.eresussec.com/en/blog/gdpr-kvkk-compliance-for-rag-ai-models Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[The Rise of Corporate Deepfakes and Vishing: AI-Powered Social Engineering]]> https://www.eresussec.com/en/blog/deepfake-vishing-ai-social-engineering https://www.eresussec.com/en/blog/deepfake-vishing-ai-social-engineering Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[The Rise of the Certified AI Security Professional (CAISP): Reimagining Enterprise Pentesting]]> https://www.eresussec.com/en/blog/certified-ai-security-professional https://www.eresussec.com/en/blog/certified-ai-security-professional Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[Bug Bounties for AI Systems: Harnessing Crowdsourced Security for LLMs]]> https://www.eresussec.com/en/blog/bug-bounty-for-ai-systems https://www.eresussec.com/en/blog/bug-bounty-for-ai-systems Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[AI Supply Chain Attacks: The Hidden Trojans Inside Open-Source LLMs]]> https://www.eresussec.com/en/blog/ai-supply-chain-attacks-huggingface https://www.eresussec.com/en/blog/ai-supply-chain-attacks-huggingface Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[AI Safety vs. AI Security: Understanding the Fundamental Differences in Enterprise ML]]> https://www.eresussec.com/en/blog/ai-safety-vs-ai-security https://www.eresussec.com/en/blog/ai-safety-vs-ai-security Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[AI-Orchestrated Cyber Espionage: The Dawn of Autonomous APT Campaigns]]> https://www.eresussec.com/en/blog/ai-orchestrated-cyber-espionage https://www.eresussec.com/en/blog/ai-orchestrated-cyber-espionage Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[What Is AI Data Governance and Why Is It So Hard to Implement?]]> https://www.eresussec.com/en/blog/ai-data-governance-challenges https://www.eresussec.com/en/blog/ai-data-governance-challenges Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[How AI Coding Assistants Like Cursor Expose Secrets: The Unseen Agentic Risk]]> https://www.eresussec.com/en/blog/ai-coding-assistants-security-risks https://www.eresussec.com/en/blog/ai-coding-assistants-security-risks Tue, 14 Apr 2026 00:00:00 GMT <![CDATA[TensorFlow Custom Operator Injection (Graph Execution)]]> https://www.eresussec.com/en/blog/pait-tf-200 https://www.eresussec.com/en/blog/pait-tf-200 Fri, 10 Apr 2026 00:00:00 GMT <![CDATA[TorchScript Model Arbitrary Code Execution Detected at Model Load Time]]> https://www.eresussec.com/en/blog/pait-tchst-300 https://www.eresussec.com/en/blog/pait-tchst-300 Fri, 10 Apr 2026 00:00:00 GMT <![CDATA[Python Pickle Arbitrary Code Execution Detected]]> https://www.eresussec.com/en/blog/pait-pkl-100 https://www.eresussec.com/en/blog/pait-pkl-100 Fri, 10 Apr 2026 00:00:00 GMT