All articles
-
AI Bill of Materials Tools: AIBOM Formats and Generators
Two AIBOM standards (CycloneDX ML-BOM, SPDX 3.0 AI profile), one free OWASP generator, and how to pick a tool without buying shelfware.
-
AI CVEs in CISA KEV: Ray, LiteLLM, and What's Missing
Three AI-stack CVEs sit in the CISA KEV catalog: one Ray, two LiteLLM. What confirmed exploitation looks like, and why ShadowRay still is not listed.
-
Inference Server CVEs: vLLM, Ollama, llama.cpp, Triton
The serving layer now outproduces model files for critical CVEs. Verified entries in vLLM, Ollama, llama.cpp and Triton, and the three defects behind them.
-
MLflow CVEs: Why 2.14.1 Still Fails Your Scanner
MLflow carries 80 published advisories and 17 with no patched version. Why scanning 2.14.1 returns unfixable findings, and which ones need real action.
-
Model File Format Security: Pickle, Safetensors, GGUF
Which model formats can execute code when loaded, which only crash, and which are inert. A format-by-format comparison built from the verified CVE record.
-
ML Model CVE Tracking: How to Monitor Your AI Stack
How to track CVEs across ML frameworks, inference servers, and model artifacts, and what to do when a vendor disputes the advisory anyway.
-
Malicious Model File Detection: Auditing ML Models
Pickle serialization flaws, PickleScan bypass CVEs, and a practical detection stack for teams pulling models from public repositories like Hugging Face.
-
ML Vulnerability Scanner Software: Static vs Dynamic Tools
A buyer's guide to ML vulnerability scanner software, comparing static model-artifact scanners like ModelScan and fickling with dynamic tools like garak.
-
Hugging Face Model Supply Chain Risk: Pickle Backdoors
How Hugging Face model supply chain risk works: pickle backdoors, the Transformers RCE CVE cluster, why the Hub scanner misses them, and what cuts risk.
-
TensorFlow Security Vulnerabilities 2026: CVEs and Supply Chain
A breakdown of the top TensorFlow security vulnerabilities in 2026: CVE-2025-49655, CVE-2025-12058, DoS flaws in 2.18.0, and supply chain risk.
-
Best AI Supply Chain Security Tools in 2026
A practitioner's guide to AI supply-chain security tools: model artifact scanners, MLOps pipeline hardening, AIBOM generators, and where each one fits.
-
LangChain Security Vulnerabilities 2026: CVEs and What to Patch
Four verified CVEs in LangChain and LangGraph expose API secrets, files, and chat history. CVSS scores, attack paths, and the patched versions to run.
-
How to Triage an ML-Stack CVE: A Practical Workflow
A repeatable workflow for taking an ML-library CVE from 'a scanner flagged it' to a defensible decision, without panic-patching or trusting the score.
-
PyTorch Security: Notable CVEs and Hardening the Loading Path
PyTorch's most consequential CVEs cluster on one thing: loading a model file that runs code. A walk through the verified entries and how to harden.
-
trust_remote_code and the ML Orchestration CVE Class
A second family of ML supply-chain CVEs has nothing to do with weights and everything to do with the glue: trust_remote_code and orchestration servers.
-
Unsafe Model Deserialization: The Pickle Problem Behind ML CVEs
Loading a model file can execute arbitrary code. The most repeated vulnerability class in the ML supply chain: the real CVEs, why they recur, and what fixes it.
-
ML CVE Database Vulnerabilities: What's Tracked and Missing
How ML CVE database vulnerabilities are catalogued in NVD and MITRE, why the taxonomy misses AI-specific flaws, and how to build monitoring that covers the gap.
-
Reading an ML Library CVE: What to Extract Beyond the CVSS Score
ML library CVEs are usually scored against a generic threat model that doesn't match how the library is used in production AI systems.