2015 In Review
Summary: Trail of Bits' 2015 review reports that its Cyber Reasoning System, entered in DARPA's challenge to find and patch vulnerabilities in 131 purposely built insecure programs within 24 hours without human intervention, identified vulnerabilities in 65 of them and rewrote 94 to eliminate the bugs. The firm also endorsed the Coalition for Responsible Cybersecurity's mission against Wassenaar Arrangement export control expansions, published a RubySec Field Guide after vulnerabilities were found in common Ruby features and idioms, and sponsored Let's Encrypt, which entered public beta on December 3.
What's compelling: An automated system found bugs in 65 of 131 programs and patched 94 of them in a day without a human in the loop, which is the pace your manual remediation queue is being measured against.
Read the original at Trail of Bits Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026