Session 13D: Software Security: Code and Compiler
Authors, Creators & Presenters: Nicolas Badoux (EPFL), Flavio Toffalini (Ruhr-Universität Bochum, EPFL), Yuseok Jeon (UNIST), Mathias Payer (EPFL)
PAPER
type++: Prohibiting Type Confusion with Inline Type Information
Type confusion, or bad casti...
The former boss of a U.S. hacking tools maker was jailed for selling highly sensitive software exploits to a Russian broker. This is how we first learned of his arrest, reported the story, and some of the unanswered questions we still have.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, bypass of the same-origin policy, information disclosure or privilege escalation. For the oldstable distribution (bookworm), these problems...
Exploitation of a maximum severity authentication bypass zero-day vulnerability affecting Cisco Catalyst SD-WAN Controller and Manager has been reported. Immediate patching is recommended to thwart ongoing attacks.
Key takeaways:
CVE-2026-20127 is an Authentication Bypass Vulnerability affecting C...
A breach of TriZetto software first described by counties in Oregon affected millions of Americans overall, according to public data released this week by the company.
Several security issues were fixed in MongoDB.
AttackIQ has released a new attack graph that emulates the behaviors exhibited by BlackByte ransomware, a strain operated under the Ransomware-as-a-Service (RaaS) model that emerged in July 2021. Since its emergence, BlackByte has targeted organizations worldwide, including entities within U.S. crit...
Do you remember the last time you were carded at a bar or restaurant? It was probably such a quick and normal experience, that you barely remember it. But have you ever been carded to use the internet? Being required to present your ID to access content online is becoming a growing reality for many....
Do you remember the last time you were carded at a bar or restaurant? It was probably such a quick and normal experience, that you barely remember it. But have you ever been carded to use the internet? Being required to present your ID to access content online is becoming a growing reality for many....
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre d'IBERDROLA CLIENTES, S.A.U. (comprenant le prononcé d'une amende de 1 000 000 €) pour des manquements en lien avec la sécurité des données personnelles de ses clients. Cette affaire débute par une p...
Tonic.ai is thrilled to join the Microsoft for Startups Pegasus Program. We're bringing our privacy-compliant synthetic data solutions to Microsoft Azure customers.
The post Tonic.ai + Microsoft: Accelerating AI adoption with privacy-compliant synthetic data appeared first on Security Boulevard.
Announcing the Fabricate Data Agent, synthetic data generation via agentic AI. Plus, Structural's Custom Categorical is now AI-assisted, and Model-based Custom Entities are coming to Textual!
The post Tonic.ai product updates: October 2025 appeared first on Security Boulevard.
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de Sportitalia Società Sportiva Dilettantistica a.r.l. (GetFIT), comprenant le prononcé d'une amende de 30 000 €, pour des manquements en lien avec la gestion des demandes d'opposition à la prospecti...
Informatica has long been a dominant force in enterprise data management. But the landscape is changing. Learn how its shift to cloud-only impacts its viability as a test data management tool.
The post Informatica Test Data Management pros and cons: a complete guide appeared first on Security Boulev...
A Solutions Architect explores the harsh realities of de-identifying sensitive data by creating custom scripts, including the questions and complexities that arise along the way.
The post Data masking: DIY internal scripts or time to buy? appeared first on Security Boulevard.
L'autorité polonaise de protection des données (UODO) a publié une décision de sanction à l'encontre de la Fondation Lumus, comprenant le prononcé d'une amende de 22 920 PLN (environ 5 270 €), pour des manquements liés à la gestion d'une violation de données et à la désignation de son délégué à la p...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de CRUZ ROJA ESPAÑOLA, comprenant le prononcé d'une amende de 100 000 €, pour des manquements en lien avec la sécurité des données et l'absence d'analyse d'impact. Cette affaire débute par une plainte...
Cisco is warning that a critical authentication bypass vulnerability in Cisco Catalyst SD-WAN, tracked as CVE-2026-20127, was actively exploited in zero-day attacks that allowed remote attackers to compromise controllers and add malicious rogue peers to targeted networks. [...]
L'Autorité suédoise de protection de la vie privée (IMY) a publié de nouvelles orientations sur le traitement des données à caractère personnel dans le secteur de la santé.Ces nouvelles pages web fournissent des informations fondamentales, des exemples concrets, des listes de contrôle ainsi que des...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a lancé une consultation publique sur un projet de recommandation visant à encadrer l'usage des outils de rejeu de session.Ce projet s'adresse tant aux fournisseurs de ces solutions techniques qu'aux éditeurs de sites web ou d'applicat...