PyTorch
-
ML Pipeline Supply Chain Attack: From Poison to Production
An ML pipeline supply chain attack turns trusted models, datasets, dependencies, or build artifacts into code execution or persistent model backdoors.
-
PyTorch Security: CVEs and Model Loading Hardening
PyTorch's most consequential CVEs cluster on one thing: loading a model file that runs code. A walk through the verified entries and how to harden.
-
Unsafe Model Deserialization: Pickle CVEs and Defenses
Pickle-based model loading can execute arbitrary code. CVE-2025-32434 shows why safer formats, provenance checks, scanning, and sandboxing matter.