I presented "Never a Dill Moment: Exploiting Machine Learning Pickle Files" at the DEFCON 29 AI Village with Evan Sultanik, Carson Harmon, and Jim Miller.
This work is also a blog post on the Trail of Bits website.
Here's the relevant GitHub repository.