#model-security
-
Model File Format Security: Pickle, Safetensors, GGUF
Which model formats can execute code when loaded, which only crash, and which are inert. A format-by-format comparison built from the verified CVE record.
-
Malicious Model File Detection: Auditing ML Models
Pickle serialization flaws, PickleScan bypass CVEs, and a practical detection stack for teams pulling models from public repositories like Hugging Face.
-
ML Vulnerability Scanner Software: Static vs Dynamic Tools
A buyer's guide to ML vulnerability scanner software, comparing static model-artifact scanners like ModelScan and fickling with dynamic tools like garak.
-
Hugging Face Model Supply Chain Risk: Pickle Backdoors
How Hugging Face model supply chain risk works: pickle backdoors, the Transformers RCE CVE cluster, why the Hub scanner misses them, and what cuts risk.
-
TensorFlow Security Vulnerabilities 2026: CVEs and Supply Chain
A breakdown of the top TensorFlow security vulnerabilities in 2026: CVE-2025-49655, CVE-2025-12058, DoS flaws in 2.18.0, and supply chain risk.
-
Best AI Supply Chain Security Tools in 2026
A practitioner's guide to AI supply-chain security tools: model artifact scanners, MLOps pipeline hardening, AIBOM generators, and where each one fits.