printf("news\n")

How CISA can improve OSS security

Trail of Bits Blog • 1700472959 • 12ft.io • archive.is • archive.org

Assessing the security posture of a widely used vision model: YOLOv7

Trail of Bits Blog • 1700043305 • 12ft.io • archive.is • archive.org

Our audit of PyPI

Trail of Bits Blog • 1699948837 • 12ft.io • archive.is • archive.org

Adding build provenance to Homebrew

Trail of Bits Blog • 1699257637 • 12ft.io • archive.is • archive.org

The issue with ATS in Apple’s macOS and iOS

Trail of Bits Blog • 1698652857 • 12ft.io • archive.is • archive.org

Numbers turned weapons: DoS in Osmosis’ math library

Trail of Bits Blog • 1698071251 • 12ft.io • archive.is • archive.org

Introducing invariant development as a service

Trail of Bits Blog • 1696492852 • 12ft.io • archive.is • archive.org

Pitfalls of relying on eBPF for security monitoring (and some solutions)

Trail of Bits Blog • 1695625247 • 12ft.io • archive.is • archive.org

Don’t overextend your Oblivious Transfer

Trail of Bits Blog • 1695196853 • 12ft.io • archive.is • archive.org

Security flaws in an SSO plugin for Caddy

Trail of Bits Blog • 1695024042 • 12ft.io • archive.is • archive.org

Holy Macroni! A recipe for progressive language enhancement

Trail of Bits Blog • 1694419212 • 12ft.io • archive.is • archive.org

Secure your Apollo GraphQL server with Semgrep

Trail of Bits Blog • 1693296014 • 12ft.io • archive.is • archive.org

iVerify is now an independent company!

Trail of Bits Blog • 1693206045 • 12ft.io • archive.is • archive.org

The Engineer’s Guide to Blockchain Finality

Trail of Bits Blog • 1692774053 • 12ft.io • archive.is • archive.org

Can you pass the Rekt test?

Trail of Bits Blog • 1691985650 • 12ft.io • archive.is • archive.org

Use our suite of eBPF libraries

Trail of Bits Blog • 1691563515 • 12ft.io • archive.is • archive.org

A mistake in the bulletproofs paper could have led to the theft of millions of dollars

Trail of Bits Blog • 1690959630 • 12ft.io • archive.is • archive.org

How AI will affect cybersecurity: What we told the CFTC

Trail of Bits Blog • 1690786832 • 12ft.io • archive.is • archive.org

The future of Clang-based tooling

Trail of Bits Blog • 1690527619 • 12ft.io • archive.is • archive.org

Announcing the Trail of Bits Testing Handbook

Trail of Bits Blog • 1690354828 • 12ft.io • archive.is • archive.org

Fuzzing on-chain contracts with Echidna

Trail of Bits Blog • 1689922831 • 12ft.io • archive.is • archive.org

Trail of Bits’s Response to OSTP National Priorities for AI RFI

Trail of Bits Blog • 1689688004 • 12ft.io • archive.is • archive.org

Evaluating blockchain security maturity

Trail of Bits Blog • 1689303603 • 12ft.io • archive.is • archive.org

What we told the CFTC about blockchain threats

Trail of Bits Blog • 1689145213 • 12ft.io • archive.is • archive.org

Differential fuzz testing upgradeable smart contracts with Diffusc

Trail of Bits Blog • 1688713233 • 12ft.io • archive.is • archive.org

Trail of Bits’s Response to NTIA AI Accountability RFC

Trail of Bits Blog • 1686902410 • 12ft.io • archive.is • archive.org

Finding bugs in C code with Multi-Level IR and VAST

Trail of Bits Blog • 1686812410 • 12ft.io • archive.is • archive.org

Trusted publishing: a new benchmark for packaging security

Trail of Bits Blog • 1684825220 • 12ft.io • archive.is • archive.org

Real World Crypto 2023 Recap

Trail of Bits Blog • 1684230883 • 12ft.io • archive.is • archive.org

Introducing Windows Notification Facility’s (WNF) Code Integrity

Trail of Bits Blog • 1684134045 • 12ft.io • archive.is • archive.org

What should governments consider when getting involved with blockchain?

Trail of Bits Blog • 1682406057 • 12ft.io • archive.is • archive.org

Typos that omit security features and how to test for them

Trail of Bits Blog • 1681974008 • 12ft.io • archive.is • archive.org

A Winter’s Tale: Improving messages and types in GDB’s Python API

Trail of Bits Blog • 1681801243 • 12ft.io • archive.is • archive.org

How to avoid the aCropalypse

Trail of Bits Blog • 1680163222 • 12ft.io • archive.is • archive.org

Codex (and GPT-4) can’t beat humans on smart contract audits

Trail of Bits Blog • 1679468449 • 12ft.io • archive.is • archive.org

Circomspect has more passes!

Trail of Bits Blog • 1679385624 • 12ft.io • archive.is • archive.org

We need a new way to measure AI security

Trail of Bits Blog • 1678780847 • 12ft.io • archive.is • archive.org

Reusable properties for Ethereum contracts

Trail of Bits Blog • 1677484854 • 12ft.io • archive.is • archive.org

Escaping well-configured VSCode extensions (for profit)

Trail of Bits Blog • 1677139242 • 12ft.io • archive.is • archive.org

Escaping misconfigured VSCode extensions

Trail of Bits Blog • 1676966450 • 12ft.io • archive.is • archive.org

Readline crime: exploiting a SUID logic bug

Trail of Bits Blog • 1676534400 • 12ft.io • archive.is • archive.org

cURL audit: How a joke led to significant findings

Trail of Bits Blog • 1676361614 • 12ft.io • archive.is • archive.org

Harnessing the eBPF Verifier

Trail of Bits Blog • 1674115242 • 12ft.io • archive.is • archive.org

Introducing RPC Investigator

Trail of Bits Blog • 1673942406 • 12ft.io • archive.is • archive.org

Announcing a stable release of sigstore-python

Trail of Bits Blog • 1673604058 • 12ft.io • archive.is • archive.org

Keeping the wolves out of wolfSSL

Trail of Bits Blog • 1673510417 • 12ft.io • archive.is • archive.org

Another prolific year of open-source contributions

Trail of Bits Blog • 1673337632 • 12ft.io • archive.is • archive.org

How to share what you’ve learned from our audits

Trail of Bits Blog • 1671721839 • 12ft.io • archive.is • archive.org

Fast and accurate syntax searching for C and C++

Trail of Bits Blog • 1671696052 • 12ft.io • archive.is • archive.org

What child is this?

Trail of Bits Blog • 1671523225 • 12ft.io • archive.is • archive.org