Trail of Bits

@trailofbits

We help secure the world’s most targeted organizations and products. We combine security research with an attacker mentality to reduce risk and fortify code.

New York, NY

trailofbits.com

2010年3月からXを利用しています

267 フォロー中

4万フォロワー

固定
Trail of Bits
@trailofbits
10月29日
October Trail of Bits Tribune: Releasing a PHP exploit demo, new plugins for patching, and package-integrity research. Plus Brotli-checker, SequenceHash, and six new public security reviews. Read the Tribune: mailchi.mp/trailofbits/oc…
4
Trail of Bits
@trailofbits
11月12日
Patching is the hardest step for agents to get right. We took what we learned from hundreds of Patch the Planet patches, thousands of internal Codex sessions, and a decade of fix reviews, and built it into two open-source agent plugins.
Greg Brockman
@gdb
11月12日
Announcing two new cyber products: - Daybreak Defense Factory (openai.com/daybreak/defen…) - Daybreak Red Team (openai.com/daybreak/red-t…) Both make it much easier to put frontier cyber capabilities to work, helping defend companies in new ways.
引用
OpenAI
@OpenAI
11月10日
We're turning our lessons from defending OpenAI into practical tools for our customers. On Thursday, join us at Cyber at the Frontier, a live keynote, for our latest cyber announcements. Working with our frontier models, we've identified and resolved important vulnerabilities in
19
Trail of Bits
@trailofbits
11月12日
Patch the Planet update: We’ve now merged 500+ fixes across 75 open-source projects, with 100 CVEs disclosed in the Linux kernel, curl, OpenSSL, nginx, vLLM, and more. trailofbits.com/patch-the-plan…
OpenAI
@OpenAI
11月10日
We're turning our lessons from defending OpenAI into practical tools for our customers. On Thursday, join us at Cyber at the Frontier, a live keynote, for our latest cyber announcements. Working with our frontier models, we've identified and resolved important vulnerabilities in
6
Trail of Bits
@trailofbits
11月6日
Attackers can drain wallets by abusing a signing service, even without stealing private keys. Our 4-step post-Binance hack guidance helps wallet teams test what their signing systems can authorize and what limits the damage if signing is compromised.
After Binance, check what your signing systems can approve
blog.trailofbits.comから
11
Trail of Bits
@trailofbits
11月3日
A cryptographically verified tally doesn't mean every vote is legitimate. Paper ballots still matter: they provide an audit record independent of software. We explain how electronic voting works, and how cryptography can make paper-based elections more trustworthy.
The cryptography behind electronic voting (and why paper ballots are still essential)
blog.trailofbits.comから
3

Trail of Bits

Trail of Bitsさんのポスト