Cybersecurity Neurodiversity Skills Development Program awarded ÂŁ100K
Threat actors force makers of Estrella Damm to temporarily halt production
Trent Brunson, Head of Research & Engineering Originally published on October 15, 2021 Come join our team today! Trail of Bits is hiring full-time Senior Software Engineers and Software Security Research Engineers. Over the last nine years, I’ve interviewed hundreds of applicants for research an...
Europol also highlighted an alarming rise in self-produced explicit material of children online in the past year
80% of EU's top pharma companies were rated as 'critically exposed'
Originally published on October 12, 2021 Consensus protocols have come to play a critical role in many applications. Fischer, Lynch, and Paterson’s classic impossibility result showed that under reasonable assumptions, it can be impossible for a protocol to reach consensus. In Dwork, Lynch, and Stoc...
Actors compromised a vulnerable web server
Irish police team-up to track prolific organized criminals
Originally published on October 6, 2021 TL;DR: Version 5.0.1 of osquery, a cross-platform, open-source endpoint visibility agent, is now available. This release is an exciting milestone for the project, as it introduces an EndpointSecurity-based process events table for macOS. Read on to learn how w...
New function will help to drive cybersecurity improvements
Threat actors instill fear by making victims believe that a complaint has been lodged against them
Originally published August 11, 2021 TL;DR: These simpler, step-by-step methods equip you to apply BPF tracing technology to real-word problems—no specialized tools or libraries required. BPF, a tracing technology in the Linux kernel for network stack tracing, has become popular recently thanks to n...
New springtime pilot aims to help veterans in Nebraska enter cybersecurity workforce
NSO Group’s newly designated CEO resigns after firm is blacklisted by Biden administration
Originally published August 3, 2021 During my Trail of Bits winternship and springternship, I had the pleasure of working with Suha Hussain and Jim Miller on PrivacyRaven, a Python-based tool for testing deep-learning frameworks against a plethora of privacy attacks. I worked on improving PrivacyRav...
How should organizations react when forced into a ransomware negotiation?
The possibility hackers accessed medical information “cannot be ruled out"
Originally published May 20, 2021 This blog post introduces Dylint, a tool for loading Rust linting rules (or “lints”) from dynamic libraries. Dylint makes it easy for developers to maintain their own personal lint collections. Previously, the simplest way to write a new Rust lint was to fork Clippy...
Adam Laurie explains why we should be worried by the risk of time synchronization being targeted by hackers
Void Balaur has been operating since 2015