Covers: Vulnerabilities & PatchingSupply Chain & AppSecAI SecurityEndpoint & Network SecurityZero-Days & ExploitsDetection & ResponseData BreachesIdentity & Access ManagementCloud SecurityOT / ICS & Critical Infrastructure
Trail of Bits integrated Eclipser, a fuzzer presented in an ICSE 2019 paper, into its DeepState property-based testing tool for C and C++, adding a front-end that translates DeepState arguments and extracts standalone test cases from Eclipser's custom...
Trail of Bits and Crypsis describe a new NTFS forensics extension for osquery that lets analysts query deeper filesystem metadata remotely, including the $STANDARD_INFORMATION and $FILE_NAME timestamps stored in the Master File Table. The extension...
Trail of Bits released Manticore 0.3.0, adding a Unicorn emulator plugin that fast-forwards through concrete execution and produced speed improvements of up to 50x, plus support for Linux binaries statically compiled for AArch64 and a dozen new Linux...
Trail of Bits released Indurative, a Haskell cryptographic library that maps types instantiating FoldableWithIndex to sparse Merkle tree representations to create and verify inclusion and exclusion proofs, letting developers add Binary Transparency to a...
QueryCon, an annual conference about the open source endpoint management tool osquery, takes place June 20th-21st at the Convene Conference Center in Downtown Manhattan, hosted by Trail of Bits at the invitation of original organizers Kolide. At the event,...
Trail of Bits presented its Slither static analysis work at WETSEB, an ICSE 2019 workshop, and recapped conference papers on static analysis, fuzzing, blockchain, and automated bug patching. Among the cited work, Facebook's SapFix tool fixes null-pointer...
Trail of Bits has worked with the Python Software Foundation since March to add two-factor authentication to Warehouse, the codebase behind PyPI, and as of today PyPI members can enable time-based OTP (TOTP) and WebAuthn, the latter in beta. The post cites...
Trail of Bits wintern Carson Harmon, a Purdue graduate and new full-time research staff member, set out to implement a dynamic points-to analysis in LLVM during the company's month-long winter internship program, which hosted 4 winterns across 3 projects....
Trail of Bits describes a Go idiom in which code panics, recovers in a deferred function, and continues, and notes that global state changes made before the panic are not undone by recover. The firm built a tool called OnEdge that re-executes the panicking...
With C++14, the standards committee strengthened constexpr so developers can force constant expressions to be evaluated at compile time rather than at every invocation, which the author says yields faster execution, smaller executables, and safer code. The...
Trail of Bits released siderophile, a tool that trawls a Rust crate's dependencies to find every unsafe function, expression, and trait method, then traces them up the callgraph to the function in the crate that uses the unsafety and ranks those functions...
A denial-of-service vulnerability dubbed 'Gridlock' was publicly reported on July 1st in one of Edgeware's smart contracts deployed on Ethereum, and as much as $900 million worth of Ether may have been processed by that contract. Edgeware acknowledged and...
A denial-of-service vulnerability dubbed 'Gridlock' was publicly reported on July 1st in an Edgeware smart contract deployed on Ethereum, which may have processed as much as $900 million worth of Ether. The bug was a strict equality assertion in the lock()...
Forrester named Trail of Bits a Leader in its Q2 2019 Wave evaluation of midsize cybersecurity consulting services, where Trail of Bits received the highest score among all participants in the current offering category and the highest possible scores in...
Trail of Bits analyzed Felix Wilhelm's July 2019 proof-of-concept that escapes a Docker container by abusing the Linux cgroup v1 notify_on_release feature, which runs a release_agent command as fully privileged root on the host when the last task leaves a...
Trail of Bits announced Crytic, a continuous assurance platform for smart contracts that connects to a GitHub repository and runs security analyses on every commit, branch, and pull request. The platform uses Slither to check for more than 60 security...
Trail of Bits published a post by Michael Rosenberg on August 06, 2019 defining end-to-end encrypted messaging as a protocol where only conversation participants, and no intermediate servers, routers, or relay systems, can read and write messages. The post...
Trail of Bits describes molasses, a Rust implementation of the Message Layer Security (MLS) protocol that implements most of MLS draft 6, and says its main contribution has been detecting errors in the specification and other implementations through unit...
Trail of Bits and DeviceAssure tore down a counterfeit iPhone 6 and Samsung S10 and found both misreported their Android versions, running KitKat 4.4.0 (last updated 2014) and Lollipop 5.1 (last updated 2015) respectively, with kernels exploitable by...
Trail of Bits analyzed 246 smart-contract findings from 23 paid audits, five of them private, and found data validation flaws were the most common at 36% of findings, followed by access control at 10%. Reentrancy, widely discussed after the DAO attack,...
A Trail of Bits intern built a new C++ SQLite wrapper from scratch in under 750 lines of code, released under the Apache 2.0 license at github.com/trailofbits/sqlite_wrapper. The work came out of an internal Clang-based code-auditing tool that moved its...
Trail of Bits open-sourced KRFAnalysis, a set of static analysis tools that triage output from its syscall fault injection tool KRF, so users can determine where and why KRF crashes their programs. The work was done by Henry Wildermuth, a Horace Mann High...
Trail of Bits open-sourced KRFAnalysis, a set of static analysis tools that triage output from its KRF syscall fault injection fuzzer, using a technique the author calls Reverse Taint Analysis implemented with the Binary Ninja API. The script traces...
Trail of Bits published an internship project post by Peter Goodman and Sai Vegasena of New York University describing KLEE-Native, a fork of KLEE that operates on binary program snapshots by lifting machine code to LLVM bitcode. The post is dated August...
Trail of Bits describes KLEE-Native, a fork of the KLEE symbolic execution tool that lifts machine code to LLVM bitcode so it can operate on binary program snapshots rather than source code. The project uses an INT3 breakpoint injected via ptrace to...
A Trail of Bits summer intern built Fennec, a tool that replaces function calls in compiled binaries by lifting them to LLVM bitcode with McSema, running an LLVM pass to swap in a new C function, and recompiling a new binary. The demonstration target was a...
Trail of Bits integrated ensemble fuzzing into DeepState, its fuzzing and symbolic-execution unit-testing framework, adding a deepstate-ensembler tool and an open-sourced front-end API/SDK with seed synchronization. The implementation follows the...
At the 2019 IACR Crypto conference, researchers reported breaking deployed cryptographic systems through small sub-component failures, including attacks on the ISO-standard OCB2 authenticated encryption scheme that enabled signature forgery and full...
On June 18, 2019, the Linux Foundation announced it would take over ownership of osquery from Facebook, with a new Technical Steering Committee of engineers from Facebook, Trail of Bits, Google, and Kolide. In the 12 weeks after QueryCon 2019, nearly 90...
A new iPhone Boot ROM exploit called checkm8, published on GitHub by axi0mX, affects the iPhone 4S through the iPhone X and was patched in devices with A12 and A13 CPUs. The exploit gives anyone with physical control of a phone the ability to run arbitrary...