At the end of last year, we had some free time to explore new and interesting uses of the automated bug-finding technology we developed for the DARPA Cyber Grand Challenge. While the rest of the competitors are quietly preparing for the CGC Final Event, we can entertain you with tales of running our...
Nine bulletins to work on but IE migration should be a priority
DD4BC suspect arrested and evidence seized
Now that the new year is upon us, we can look back and take assessment of 2015. The past year saw Trail of Bits continuing our prior work, such as automated vulnerability discovery and remediation, and branching out into new areas, like secure self-hosted video chat. We also increased our community...
Site owners didn’t contact users after September attack
The intent is to confuse search engine bots and erroneously impact page rankings for thousands of sites, for mass web defacement.
We’re excited to announce our financial support for Let’s Encrypt, the open, automated and free SSL Certificate Authority (CA) that went into public beta on December 3. With so much room for improvement in the CA space, Let’s Encrypt offers a refreshing, promising vision of encrypting the web. Expen...
59% of the Android mobile finance apps tested had at least three Top 10 risks, whereas a full 100% of the iOS apps tested had at least three.
A group of malware is targeting government websites in Asia, using watering-hole methods and spear phishing.
Today, we’re releasing the source code to our self-hosted video chat platform, Tuber Time Communications (or just “Tuber”). We’ve been using Tuber for private video calls with up to 15 members of our team over the last year or two. We want you to use it, protect your privacy, and help us make it bet...
Trend Micro says distracted police and lax laws are to blame
Onur Kopçak gets 135 years to add to his previous 199
New study claims few are ready for GDPR compliance
Spymel infects the targeted system through spammed email, spies on all user activity, and relays it to the attacker.
There has been a concerning uptick in both the number and severity of attacks against financial institutions that involve extortion.
Car maker in security push
According to the Mobile Ecosystem Forum, 36% of consumers say that lack of trust is the No. 1 reason they decide against mobile apps.
Tuesday 12 January will see many versions left exposed to attackers
Fake emails are claiming to be delivering legitimate WhatsApp content.
The device's security relies on an 8-digit password which is easily brute-forced, allowing full unauthorized access to the user’s network.