37% of organizations do not have contingency plans in place to respond to a ransomware attack during weekend and holiday periods
Lumen claims longest attack lasted 14 days
Trent Brunson, Head of Research & Engineering Originally published on October 15, 2021 Come join our team today! Trail of Bits is hiring full-time Senior Software Engineers and Software Security Research Engineers. Over the last nine years, I’ve interviewed hundreds of applicants for research an...
Rogue state blamed for long-running campaign for first time
GCHQ agency trumpets “world-class” cybersecurity
Originally published on October 12, 2021 Consensus protocols have come to play a critical role in many applications. Fischer, Lynch, and Paterson’s classic impossibility result showed that under reasonable assumptions, it can be impossible for a protocol to reach consensus. In Dwork, Lynch, and Stoc...
Researchers observe TrickBot trojan launching apparent new loader for “world’s most dangerous malware"
Youngest and most ethnically diverse generation of ethical hackers in history is smashing it
Originally published on October 6, 2021 TL;DR: Version 5.0.1 of osquery, a cross-platform, open-source endpoint visibility agent, is now available. This release is an exciting milestone for the project, as it introduces an EndpointSecurity-based process events table for macOS. Read on to learn how w...
Nearly a third of districts lack a cloud security platform to monitor and defend data
Many SMEs have undergone digital transformations during COVID-19, and this has put them at higher risk of cyber attacks
Originally published August 11, 2021 TL;DR: These simpler, step-by-step methods equip you to apply BPF tracing technology to real-word problems—no specialized tools or libraries required. BPF, a tracing technology in the Linux kernel for network stack tracing, has become popular recently thanks to n...
The Digital Secretary believes national security remains a relevant consideration in the proposed deal
Telco giant says business would suffer "irreparable" harm
Originally published August 3, 2021 During my Trail of Bits winternship and springternship, I had the pleasure of working with Suha Hussain and Jim Miller on PrivacyRaven, a Python-based tool for testing deep-learning frameworks against a plethora of privacy attacks. I worked on improving PrivacyRav...
Industry calls for more intervention to help risk management efforts
Threat actors remove rivals and leverage insecure default settings
Originally published May 20, 2021 This blog post introduces Dylint, a tool for loading Rust linting rules (or “lints”) from dynamic libraries. Dylint makes it easy for developers to maintain their own personal lint collections. Previously, the simplest way to write a new Rust lint was to fork Clippy...
Cyber-safety platform’s funny new ads help public spot gift card scams
Danny Fenster escapes sentence of 11 years with hard labor in Myanmar prison