Russian arrives in States after extradition from Israel
New study reveals damaging ripple effect of cyber-incidents
At Trail of Bits, we make a significant effort to stay up to date with the academic world. We frequently evaluate our work through peer-reviewed conferences, and we love to attend academic events (see our recent ICSE and Crypto recaps). However, we consistently see one recurring issue at these acade...
Cyber Monday will mark the beginning of an extensive cybersecurity campaign by the IRS
Facebook app users complain over unexpected camera activation
Imagine reducing the amount of code and time needed to test software, while at the same time increasing the efficacy of your tests and making your debugging tasks easier—all with minimal human effort. It seems too good to be true, but we’re going to explain how test-case reduction can do all this (a...
Airbus will work in collaboration with the NCSC on the new initiative
Reports suggest billing systems have been taken offline
The Trail of Bits Assurance practice has received an influx of Go projects, following the success of our Kubernetes assessment this summer. As a result, we’ve been adapting for Go projects some of the security assessment techniques and tactics we’ve used with other compiled languages. We started by...
Federal court rules “suspicionless searches” unconstitutional
Patch Tuesday heralds scores more flaws to fix
Parsing is hard, even when a file format is well specified. But when the specification is ambiguous, it leads to unintended and strange parser and interpreter behaviors that make file formats susceptible to security vulnerabilities. What if we could automatically generate a “safe” subset of any file...
Fly-fishing equipment retailer caught out in double data breach
Burp Suite creators fight cyber-skills shortage with interactive training platform
TL;DR: x86_64 decoding is hard, and the number and variety of implementations available for it makes it uniquely suited to differential fuzzing. We’re open sourcing mishegos, a differential fuzzer for instruction decoders. You can use it to discover discrepancies in your own decoders and analysis to...
Aqua Security expands into cloud security posture management with new acquisition
Redmond giant seeks to differentiate on privacy
Recently, security researchers discovered that Apple was sending safe browsing data to Tencent for all Chinese users. This revelation has brought the underlying security and privacy guarantees of the safe browsing protocol under increased scrutiny. In particular, safe browsing claims to protect user...
DDoS attack failed due to “robust security systems”
Figure drops to a fifth for organizations in the Americas