Venom is a library that meant to perform evasive communication using stolen browser socket - Idov31/Venom

IDA plugin which queries language models to speed up reverse-engineering - JusticeRage/Gepetto

Many of you asked for this, and today we are happy to announce the release of our VTI Cheat Sheet with hints and examples on the most usefu...

Microsoft discovered a vulnerability in macOS, referred to as “Achilles”, allowing attackers to bypass application execution restrictions enforced by the Gatekeeper security mechanism.

Binarly released a new version of efiXplorer v5.2 [Xmas Edition] today, with support for the new IDA SDK v8.2 and the addition of multiple code analysis improvements.

The first part of the series about learning Linux kernel exploitation through hxpCTF2020 kernel-rop: Setting up the environment and the simplest technique of ret2usr

"Windows built-in Sandbox Disables Microsoft Defender and other EDR/AV: Attack Detection and Prevention via MemoryRanger"


• Kernel attacks are still serious for Windows OS security. It is crucial to analyze the popular techniques that result in loading…

Collect crash (or UndefinedBehaviorSanitizer error) reports, triage, and estimate severity. - ispras/casr

Trail of Bits recently completed a security review of cURL, which is an amazing and ubiquitous tool for transferring data. We were really thrilled to see cURL founder and lead developer Daniel Stenberg write a blog post about the engagement and the report…

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎 - hahwul/DevSecOps

A free ebook on Embedded systems security, TrustZone, and reverse engineering firmware.

We discovered a new high-severity vulnerability (CVE-2022-23529) in the popular JsonWebToken open source project.

Code signing of applications is an essential element of macOS security. Besides signing applications, it is also possible to sign installer packages (.pkg files). During a short review of the xar source code, we found a vulnerability (CVE-2022-42841) that…

The new release (38.0) brings Kubeshark scalability to a whole new level, introducing a new distributed PCAP storage system, DNS support, TCP/UDP stream replay, historic traffic snapshot and much more.

Posted by Oliver Chang, OSS-Fuzz team Since launching in 2016 , Google's free OSS-Fuzz code testing service has helped get over 8800 vul...