Entertainment company repeatedly pushed back updates after being notified of serious vulnerability
Sparks Group member pleads guilty to illegally distributing movies and TV shows on the internet
During my summer internship, I had the wonderful opportunity to work on the Manticore User Interface (MUI). The MUI project aims to combine the strength of both Manticore, a powerful symbolic execution library, and Binary Ninja, a popular binary analysis tool, to provide a more intuitive and visual...
Hackers allegedly posed as Proud Boys to influence 2020 presidential election
Brian Honan sets out a number of security strategies organizations should adopt to defend and respond effectively to cyber-attacks
Trent Brunson, Head of Research & Engineering Originally published on October 15, 2021 Come join our team today! Trail of Bits is hiring full-time Senior Software Engineers and Software Security Research Engineers. Over the last nine years, I’ve interviewed hundreds of applicants for research an...
Eugene Kaspersky argues traditional approaches to cybersecurity are no longer sufficient for protecting critical infrastructure from cyber-attacks
Kalman Butt is said to have used the encrypted comms platform
Originally published on October 12, 2021 Consensus protocols have come to play a critical role in many applications. Fischer, Lynch, and Paterson’s classic impossibility result showed that under reasonable assumptions, it can be impossible for a protocol to reach consensus. In Dwork, Lynch, and Stoc...
Threat actors go to great lengths to stay hidden on the repository
A fifth took no action at all, according to non-profit study
Originally published on October 6, 2021 TL;DR: Version 5.0.1 of osquery, a cross-platform, open-source endpoint visibility agent, is now available. This release is an exciting milestone for the project, as it introduces an EndpointSecurity-based process events table for macOS. Read on to learn how w...
Researchers investigating the activities of TA406 are left with a prevailing sense of déjà vu
Charges brought in cyberstalking case that forced victim to move house
Originally published August 11, 2021 TL;DR: These simpler, step-by-step methods equip you to apply BPF tracing technology to real-word problems—no specialized tools or libraries required. BPF, a tracing technology in the Linux kernel for network stack tracing, has become popular recently thanks to n...
CISOs’ heavy workload is causing them to miss medical appointments and holidays
Ciaran Martin sets out the reality of cyber harms, and argues this knowledge underpins strong cybersecurity
Originally published August 3, 2021 During my Trail of Bits winternship and springternship, I had the pleasure of working with Suha Hussain and Jim Miller on PrivacyRaven, a Python-based tool for testing deep-learning frameworks against a plethora of privacy attacks. I worked on improving PrivacyRav...
Dr Victoria Baines believes the sector needs to avoid the use of dramatic language when describing cyber-threats to the public
Shared resource dramatically increases success rates for Winnti group