Covers: Vulnerabilities & PatchingSupply Chain & AppSecAI SecurityEndpoint & Network SecurityZero-Days & ExploitsDetection & ResponseData BreachesIdentity & Access ManagementCloud SecurityOT / ICS & Critical Infrastructure
Trail of Bits added an allowlist-based pickle file scanner to Fickling to protect AI/ML environments from malicious pickle files that could compromise models or infrastructure. The same author previously detailed Sleepy Pickle, a hybrid ML model...
Trail of Bits released new features for Fickling, its pickle file scanner and decompiler, that use an explicit allowlist of safe imports rather than a list of known dangerous ones, and can be enabled with a single line of code that hooks the pickle module....
Trail of Bits published a September 18, 2025 post by Guillermo Larregay describing mutation testing, which introduces bugs into code systematically to check whether a test suite catches them. The post recommends blockchain developers use the technique to...
Trail of Bits describes mutation testing as a technique that introduces systematic bugs, called mutants, into a codebase and runs the existing test suite to see whether it catches them, with the share of killed mutants serving as the effectiveness metric....
Trail of Bits describes how attackers exploit the trust assumptions behind commands like cargo add and pip install, citing thousands of malicious packages removed from PyPI and npm in 2024 and the XZ Utils backdoor that nearly reached millions of Linux...
During a security review of OpenVPN2, Trail of Bits faced roughly 2,500 implicit integer conversion warnings from compiler flags like -Wconversion and built a custom CodeQL query that narrowed them to 20 high-priority cases. After reviewing those 20, the...
Trail of Bits researchers bypassed human approval protections for system command execution in AI agents, achieving remote code execution in three agent platforms, per an October 22, 2025 post by Will Vandevanter. In a separate August 04, 2025 post,...
Trail of Bits researchers bypassed human-approval safeguards in three popular AI agent platforms, achieving one-shot remote code execution through argument injection into pre-approved commands such as go test, git show, and ripgrep. The exploits abused...
Trail of Bits disclosed vulnerabilities in eight confidential computing systems that use LUKS2 disk encryption, caused by malleable metadata headers that let an attacker with write access to storage disks trick a trusted execution environment guest into...
This is an index page of Trail of Bits blog posts by Joop van de Pol, covering cryptography topics including electronic passports, passkeys, and zero-knowledge identity proofs. It also lists audits of Silence Laboratories' DKLs23 threshold signature...
Electronic passports are embedded devices with a filesystem, access controls, and cryptographic protocols specified in ICAO Doc 9303, using short-range RFID (ISO 14443) readable at 10–15 centimeters while eavesdropping is possible at distances of several...
On November 3, 2025, attackers exploited a rounding direction error in Balancer v2 to drain more than $100M across nine blockchain networks, and Trail of Bits confirmed Balancer v3 was not affected. Trail of Bits had flagged the same rounding behavior in...
Trail of Bits released Checksec Anywhere, a browser-based tool that consolidates fragmented binary security analysis tools into one platform and analyzes ELF, PE, and Mach-O formats locally without compromising privacy or performance. The release was...
Trail of Bits released Checksec Anywhere, a browser-based tool that analyzes ELF, PE, and Mach-O binaries for exploit mitigations such as ASLR, DEP, stack canaries, GS cookies, Control Flow Guard, ARC, and code signing from a single interface. Built by a...
Trail of Bits released open-source pure Go implementations of ML-DSA (FIPS-204) and SLH-DSA (FIPS-205), the NIST-standardized post-quantum signature algorithms, engineered to be constant time. The team removed branches and division from ML-DSA's Decompose...
Trail of Bits released Slither-MCP, an MCP server that wraps Slither's static analysis engine and exposes its API as tools so LLMs can analyze Solidity projects built with Foundry, Hardhat, and similar frameworks. The tool lets models retrieve a function's...
Trail of Bits discovered and disclosed two vulnerabilities in the widely used elliptic JavaScript library that could allow signature forgery or prevent valid signature verification. One of the two vulnerabilities remained unfixed after the 90-day...
Trail of Bits disclosed two vulnerabilities in elliptic, a JavaScript elliptic curve cryptography library downloaded over 10 million times weekly and used by close to 3,000 projects, caused by a missing modular reduction and a missing length check. The...
Trail of Bits developed constant-time coding support for LLVM that prevents compilers from breaking cryptographic implementations vulnerable to timing attacks. The work introduces the __builtin_ct_select family of intrinsics that preserve constant-time...
Trail of Bits has developed constant-time coding support for LLVM, introducing a __builtin_ct_select family of intrinsics that prevents the Clang compiler from optimizing carefully crafted constant-time code into versions with data-dependent branches. The...
Trail of Bits released mrva, a terminal-first, open-source alternative to GitHub's CodeQL multi-repository variant analysis (MRVA), which GitHub introduced in 2023 to run queries across thousands of projects using pre-built databases. mrva runs entirely on...
Trail of Bits is preparing Sigstore's rekor-monitor for production use so developers can detect tampering and unauthorized uses of their identities in the Rekor transparency log. Separately, PyPI now supports marking projects as archived, letting owners...
Trail of Bits, funded by the OpenSSF, is preparing Sigstore's rekor-monitor for production use, adding support for the new Rekor v2 log, certificate validation against trusted CAs, and public key fetching via The Update Framework. The tool lets package...
Trail of Bits published a December 16, 2025 post by Dominik Czarnota and Dominik Klemba describing GWP-ASan, a sampling-based memory error detection tool that catches use-after-free and buffer overflows in production with near-zero performance overhead....
Trail of Bits describes GWP-ASan as a sampling-based memory error detection tool that catches use-after-free and buffer overflows in production environments with near-zero performance overhead, unlike AddressSanitizer, which the firm says is too...
Trail of Bits explains GWP-ASan, a sampling-based allocation sanitizer that instruments a random fraction of heap allocations - typically less than 0.1% - and places them in isolated regions with inaccessible guard pages to detect double-free,...
This is an index page of Trail of Bits blog posts by Evan Sultanik, spanning December 2025 back to 2019, covering topics from LLM code generation and dependency analysis to cryptocurrency exchange account takeover and machine learning pickle file exploits....
A Trail of Bits engineer at the AI Engineer Code Summit in New York describes attendees arguing developers will soon never need to look at code again, and counters that the analogy to the shift from assembly to C misses determinism: compilers preserve...
Trail of Bits released go-panikint, a modified Go compiler that inserts runtime checks during conversion to Static Single Assignment form, turning silent integer overflows into explicit panics. Using it in a fuzzing campaign against the Cosmos SDK, they...
Trail of Bits researchers exploited a lack of isolation mechanisms in multiple agentic browsers, carrying out attacks that ranged from spreading false information to leaking data across sites. The post, published January 13, 2026, states that these attacks...