Sophia D
Summary: This is a Trail of Bits blog index page listing posts by Sophia D'Antoine, including a 2018 piece on automatically identifying weird machines in software, a 2015 writeup of FireEye's Flare-On reversing challenges, and a 2015 REcon talk on a hardware side channel targeting co-located cloud VMs via the CPU pipeline. The page frames exploitation as a cat-and-mouse cycle dating to the Morris worm in 1988, with attackers using exploitation primitives and vendors adding mitigations to break them.
What's compelling: The cloud side-channel work targets co-located virtual machines by exploiting the CPU pipeline rather than cache tiers, a reminder that multi-tenant isolation assumptions rest on hardware behavior you do not control.
Read the original at Trail of Bits Blog ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026