Covers: Vulnerabilities & PatchingSupply Chain & AppSecAI SecurityEndpoint & Network SecurityZero-Days & ExploitsDetection & ResponseData BreachesIdentity & Access ManagementCloud SecurityOT / ICS & Critical Infrastructure
Meltdown is a design flaw in almost every Intel processor released since 1995 that lets a specially crafted program read kernel memory it has no permission to access, using a cache-based timing side-channel that survives speculative execution being rolled...
Trail of Bits is auditing Parity Technologies' Ethereum client, starting with the beta branch and its corresponding jsonrpc library over the next few weeks. The review covers Parity's key generation and storage, the RPCs that use private keys and handle...
Trail of Bits' 2017 review recounts the firm's year: it won contracts with Lockheed Martin and the Department of Defense's DIUx to apply and scale its Cyber Reasoning System, open-sourced the Manticore symbolic execution tool, and reworked McSema around a...
Trail of Bits released Echidna at EthCC, described as the first fuzzer to target smart contracts, with features including abstract state-machine modeling and automatic minimal test case generation. It ships with an echidna-test executable that requires...
Trail of Bits was engaged by CTS Labs at standard consulting rates to review and confirm the technical accuracy of CTS's preliminary AMD findings, and it confirmed that the proof-of-concept code worked as described on the hardware it tested while deferring...
Trail of Bits' second post on Meltdown and Spectre describes Spectre Variant 1, which tricks the conditional branch predictor into skipping bounds checks and reading memory via a cache timing side channel, and Variant 2, which abuses the indirect branch...
Trail of Bits released a suite of Ethereum security tools it built over two years of blockchain audits, including the Slither static analyzer, the Echidna fuzzer, the Manticore symbolic execution engine, and the Ethersplay, IDA-EVM, and Rattle reverse...
Trail of Bits demonstrates using Binary Ninja's Medium Level IL and SSA form to model vulnerabilities in binaries and solve them with Microsoft Research's Z3 theorem prover, walking through Heartbleed as the example. The post explains that Heartbleed was a...
Trail of Bits outlines four preparation steps for a security review: define the questions you want answered, resolve easy issues and clean the codebase before handoff, document incomplete changes and past security reviews and bugs, and deliver the code...
Trail of Bits asked osquery users what they wish the tool could do, and the answers included write-access to endpoints, automated incident response, and paying down technical debt. The post notes osquery is currently read-only, that a pull request enabling...
Trail of Bits describes Echidna, a property-based fuzzer for EVM code such as Solidity contracts, built on Hedgehog's state machine testing tools to generate random call sequences and check user-defined invariants. The post models a two-state turnstile...
Trail of Bits, in partnership with Crypsis, released an osquery extension that pulls additional NTFS filesystem metadata, including filename timestamps, file security descriptors, Alternate Data Streams, and deallocated directory index entries. Loading the...
Trail of Bits, in partnership with Palantir, released an open-source osquery extension that manages Google Santa, the macOS application whitelist and blacklist system, without a separate sync server. The extension adds two tables, santa_rules (shasum,...
Trail of Bits released three osquery extensions in May 2018: one to manage local firewalls across fleets on the three major operating systems, one to manage Google Santa's macOS application whitelist and blacklist without a separate sync server, and one to...
Trail of Bits, in partnership with Airbnb, released an osquery extension that gives programmatic control over the native firewalls on Linux, Windows, and macOS through a common interface. The extension adds two writable tables, HostBlacklist and...
Kolide hosted the first-ever osquery conference, QueryCon, at the Palace of the Fine Arts in San Francisco, drawing over 120 attendees and 16 speakers from security teams at Facebook, Airbnb, Yelp, Atlassian, Adobe, Netflix, and Salesforce. As of that...
Trail of Bits announced an osquery support group, offering two paid support plans - one for year-round assurance and one for custom development - to address feature requests that Facebook's small osquery team cannot handle. The company proposes that...
Trail of Bits is partnering with the SummerCon Foundation to create the Trail of Bits SummerCon Fellowship, a $100,000 grant program for budding security researchers in which at least 50% of spots are reserved for minority and female-identifying...
During a Springternship at Trail of Bits, Tim Alberdingk Thijm created data-flow-based optimizations that eliminate most dead stores emulating writes to machine code registers in McSema-lifted programs. Applying his dead-store-elimination passes to Apache...
Trail of Bits intern Tim Alberdingk Thijm built data-flow-based dead store elimination passes for McSema-lifted programs, and applying them to Apache httpd removed 117,059 stores, or 50% of store operations to Remill's register State structure. The passes...
Biham and Newman found an invalid curve point attack in Bluetooth's elliptic curve Diffie-Hellman key exchange, which validated only the x coordinate of exchanged points and not the y coordinate. An attacker who replaces a point (x, y) with (x, 0) gets a...
A Trail of Bits intern modeled fault attacks on RSA signatures that use the Chinese Remainder Theorem, flipping bits in memory to corrupt one partial signature so that the greatest common denominator of n and s^e - m reveals the private factors p and q. In...
Trail of Bits describes how organizations, including the federal government, use open-source projects in security operations and secure development, citing fast deployment without purchasing approval, customization, transparency, and community maintenance...
Trail of Bits released windows-acl, a Rust crate that simplifies programmatic manipulation of Windows discretionary (DACL) and system (SACL) access control lists. The crate handles the ordering and conflict rules that make inserting DACL entries difficult,...
Trail of Bits is disclosing a previously unknown flaw in the Zeppelin proxy upgrade pattern, which it says affects all Zeppelin implementations it investigated: the proxy does not check that the target contract exists before returning, so a failed call can...
Trail of Bits released Rattle, an EVM binary static analysis framework that converts the Ethereum Virtual Machine's stack machine into an infinite-register SSA form, removing DUPs, SWAPs, PUSHs, and POPs. On the King of Ether contract, Rattle cut the...
Trail of Bits describes its work under DARPA's Cyber Fault-Tolerant Attack Recovery (CFAR) program, which runs multiple variants of a program in parallel and flags behavioral divergence between them to detect 0-day exploits, memory corruption, and...
Trail of Bits released Winchecksec, an open-source tool that takes a Windows PE binary as input and reports the security features baked in at build time, with plain-text and JSON output modes controlled by a single -j flag. The tool distinguishes "Dynamic...
Trail of Bits is launching free, one-hour Ethereum security office hours every other week at noon Eastern on the first and third Tuesdays, alongside a curated set of Ethereum security references and a crowdsourced directory of blockchain company security...
Trail of Bits reports that of nearly 200 fuzzing papers published in the last three years, most are academic clamor, held back by inconsistent and subjective benchmarks. The authors of the paper "Evaluating Fuzz Testing," presented by Andrew Ruef at the...