printf("news\n")

How to introduce Semgrep to your organization

Trail of Bits Blog • 1705050026 • 12ft.io • archive.is • archive.org

Securing open-source infrastructure with OSTIF

Trail of Bits Blog • 1704790808 • 12ft.io • archive.is • archive.org

Tag, you’re it: Signal tagging in Circom

Trail of Bits Blog • 1704186001 • 12ft.io • archive.is • archive.org

Billion times emptiness

Trail of Bits Blog • 1703840451 • 12ft.io • archive.is • archive.org

AI In Windows: Investigating Windows Copilot

Trail of Bits Blog • 1703667622 • 12ft.io • archive.is • archive.org

We’ve added more content to ZKDocs

Trail of Bits Blog • 1703581259 • 12ft.io • archive.is • archive.org

Catching OpenSSL misuse using CodeQL

Trail of Bits Blog • 1703235635 • 12ft.io • archive.is • archive.org

Summer interns 2023 recap

Trail of Bits Blog • 1703062813 • 12ft.io • archive.is • archive.org

A trail of flipping bits

Trail of Bits Blog • 1702888216 • 12ft.io • archive.is • archive.org

DARPA’s AI Cyber Challenge: We’re In!

Trail of Bits Blog • 1702544445 • 12ft.io • archive.is • archive.org

Say hello to the next chapter of the Testing Handbook!

Trail of Bits Blog • 1702283416 • 12ft.io • archive.is • archive.org

Publishing Trail of Bits’ CodeQL queries

Trail of Bits Blog • 1701851425 • 12ft.io • archive.is • archive.org

ETW internals for security research and forensics

Trail of Bits Blog • 1700636412 • 12ft.io • archive.is • archive.org

How CISA can improve OSS security

Trail of Bits Blog • 1700472959 • 12ft.io • archive.is • archive.org

Assessing the security posture of a widely used vision model: YOLOv7

Trail of Bits Blog • 1700043305 • 12ft.io • archive.is • archive.org

Our audit of PyPI

Trail of Bits Blog • 1699948837 • 12ft.io • archive.is • archive.org

Adding build provenance to Homebrew

Trail of Bits Blog • 1699257637 • 12ft.io • archive.is • archive.org

The issue with ATS in Apple’s macOS and iOS

Trail of Bits Blog • 1698652857 • 12ft.io • archive.is • archive.org

Numbers turned weapons: DoS in Osmosis’ math library

Trail of Bits Blog • 1698071251 • 12ft.io • archive.is • archive.org

Introducing invariant development as a service

Trail of Bits Blog • 1696492852 • 12ft.io • archive.is • archive.org

Pitfalls of relying on eBPF for security monitoring (and some solutions)

Trail of Bits Blog • 1695625247 • 12ft.io • archive.is • archive.org

Don’t overextend your Oblivious Transfer

Trail of Bits Blog • 1695196853 • 12ft.io • archive.is • archive.org

Security flaws in an SSO plugin for Caddy

Trail of Bits Blog • 1695024042 • 12ft.io • archive.is • archive.org

Holy Macroni! A recipe for progressive language enhancement

Trail of Bits Blog • 1694419212 • 12ft.io • archive.is • archive.org

Secure your Apollo GraphQL server with Semgrep

Trail of Bits Blog • 1693296014 • 12ft.io • archive.is • archive.org

iVerify is now an independent company!

Trail of Bits Blog • 1693206045 • 12ft.io • archive.is • archive.org

The Engineer’s Guide to Blockchain Finality

Trail of Bits Blog • 1692774053 • 12ft.io • archive.is • archive.org

Can you pass the Rekt test?

Trail of Bits Blog • 1691985650 • 12ft.io • archive.is • archive.org

Use our suite of eBPF libraries

Trail of Bits Blog • 1691563515 • 12ft.io • archive.is • archive.org

A mistake in the bulletproofs paper could have led to the theft of millions of dollars

Trail of Bits Blog • 1690959630 • 12ft.io • archive.is • archive.org

How AI will affect cybersecurity: What we told the CFTC

Trail of Bits Blog • 1690786832 • 12ft.io • archive.is • archive.org

The future of Clang-based tooling

Trail of Bits Blog • 1690527619 • 12ft.io • archive.is • archive.org

Announcing the Trail of Bits Testing Handbook

Trail of Bits Blog • 1690354828 • 12ft.io • archive.is • archive.org

Fuzzing on-chain contracts with Echidna

Trail of Bits Blog • 1689922831 • 12ft.io • archive.is • archive.org

Trail of Bits’s Response to OSTP National Priorities for AI RFI

Trail of Bits Blog • 1689688004 • 12ft.io • archive.is • archive.org

Evaluating blockchain security maturity

Trail of Bits Blog • 1689303603 • 12ft.io • archive.is • archive.org

What we told the CFTC about blockchain threats

Trail of Bits Blog • 1689145213 • 12ft.io • archive.is • archive.org

Differential fuzz testing upgradeable smart contracts with Diffusc

Trail of Bits Blog • 1688713233 • 12ft.io • archive.is • archive.org

Trail of Bits’s Response to NTIA AI Accountability RFC

Trail of Bits Blog • 1686902410 • 12ft.io • archive.is • archive.org

Finding bugs in C code with Multi-Level IR and VAST

Trail of Bits Blog • 1686812410 • 12ft.io • archive.is • archive.org

Trusted publishing: a new benchmark for packaging security

Trail of Bits Blog • 1684825220 • 12ft.io • archive.is • archive.org

Real World Crypto 2023 Recap

Trail of Bits Blog • 1684230883 • 12ft.io • archive.is • archive.org

Introducing Windows Notification Facility’s (WNF) Code Integrity

Trail of Bits Blog • 1684134045 • 12ft.io • archive.is • archive.org

What should governments consider when getting involved with blockchain?

Trail of Bits Blog • 1682406057 • 12ft.io • archive.is • archive.org

Typos that omit security features and how to test for them

Trail of Bits Blog • 1681974008 • 12ft.io • archive.is • archive.org

A Winter’s Tale: Improving messages and types in GDB’s Python API

Trail of Bits Blog • 1681801243 • 12ft.io • archive.is • archive.org

How to avoid the aCropalypse

Trail of Bits Blog • 1680163222 • 12ft.io • archive.is • archive.org

Codex (and GPT-4) can’t beat humans on smart contract audits

Trail of Bits Blog • 1679468449 • 12ft.io • archive.is • archive.org

Circomspect has more passes!

Trail of Bits Blog • 1679385624 • 12ft.io • archive.is • archive.org

We need a new way to measure AI security

Trail of Bits Blog • 1678780847 • 12ft.io • archive.is • archive.org