Covers: Vulnerabilities & PatchingSupply Chain & AppSecAI SecurityEndpoint & Network SecurityZero-Days & ExploitsDetection & ResponseData BreachesIdentity & Access ManagementCloud SecurityOT / ICS & Critical Infrastructure
Trail of Bits released two plugins, patching-bugs and regression-hunt, that delegate patch development and regression checks to AI agents, built through its Patch the Planet initiative with OpenAI. A review of every merged Patch the Planet patch found 21...
This is an author archive page from the Trail of Bits Blog listing posts by Artem Dinaburg, including items on using Codex to cut backporting time from days to hours per fix and a post titled "VMs won't contain cyber-capable agents." The page is a...
Trail of Bits used Codex with GPT-5.6 to backport security fixes into stable Linux releases, cutting preparation and review time from days to roughly 30 minutes for a straightforward fix and about three hours for a more involved case. By October 29, the...
This is a Trail of Bits blog index page listing posts by Fredrik Dahlgren and other authors, covering topics such as the cryptography behind electronic voting, a denial-of-service vulnerability in the Pedersen distributed key generation phase of threshold...
Trail of Bits explains that cryptography can keep individual votes secret and make tallies independently verifiable, as in the Helios and ElectionGuard protocols, but that it cannot replace paper ballots in general elections. The post cites the National...
Trail of Bits published a post by Tarun Bansal, Jaime Iglesias, and Anish Naik dated November 06, 2026, titled "After Binance, check what your signing systems can approve," laying out four steps to strengthen wallet security: restrict signing access,...
Binance's November 3 report described an October 2026 attack that combined social engineering, misuse of an internal AI tool, stolen credentials, and unauthorized access to its wallet-signing service, with an attacker using a compromised DevOps laptop to...