CodeQL + DTrace

GCP Cloud Function Abuse

https://blog.codydmartin.com/gcp-cloud-function-abuse/

DeepDi: Learning a Relational Graph Convolutional Network Model on Instructions for Fast and Accurate Disassembly

https://www.cs.ucr.edu/~heng/pubs/DeepDi.pdf

P.S. Интересно, но много фолсов

How AI helps keeping Gmail inboxes malware free

https://elie.net/static/files/how-ai-helps-keeping-gmail-inboxes-malware-free/how-ai-helps-keeping-gmail-inboxes-malware-free-slides.pdf

Introducing VirusTotal Code Insight: Empowering threat analysis with generative AI

https://blog.virustotal.com/2023/04/introducing-virustotal-code-insight.html

Buzzer - An eBPF Fuzzer toolchain

https://github.com/google/buzzer

The Art of Information Disclosure: A Deep Dive into CVE-2022-37985, a Unique Information Disclosure Vulnerability in Windows Graphics Component


https://www.trellix.com/en-us/about/newsroom/stories/research/the-art-of-information-disclosure.html

eBPF Observability Tools Are Not Security Tools

https://www.brendangregg.com/blog/2023-04-28/ebpf-security-issues.html

Using AI to find software vulnerabilities in XNU

https://www.inulledmyself.com/2023/05/using-ai-to-find-software.html

Announcing Snapchange: An Open Source KVM-backed Snapshot Fuzzing Framework

https://aws.amazon.com/blogs/opensource/announcing-snapchange-an-open-source-kvm-backed-snapshot-fuzzing-framework/

PASTIS For The Win!

PASTIS is an open-source fuzzing framework that aims at combining various software testing techniques within the same workflow to perform collaborative fuzzing, also known as ensemble fuzzing. At the moment it supports Honggfuzz and AFL++ for grey-box fuzzers and TritonDSE for white-box fuzzers.

https://blog.quarkslab.com/pastis-for-the-win.html

Unearthing Vulnerabilities in the Apple Ecosystem The Art of KidFuzzerV2.0
OffensiveCon 2023

https://github.com/star-sg/Presentations/blob/main/Offensivecon%202023/Unearthing%20Vulnerabilities%20in%20the%20Apple%20Ecosystem%20The%20Art%20of%20KidFuzzerV2.0.pdf

BCGen: a comment generation method for bytecode

GDBFuzz: Debugger-Driven Fuzzing

https://github.com/boschresearch/gdbfuzz

QLORA: Efficient Finetuning of Quantized LLMs


https://arxiv.org/pdf/2305.14314.pdf

OffensiveCon23 - Samuel Groß & Carl Smith - Advancements in JavaScript Engine Fuzzing

https://www.youtube.com/watch?v=Yd9m7e9-pG0

OffensiveCon23 - Stacksmashing- Inside Apple’s Lightning: JTAGging the iPhone for Fuzzing and Profit

https://www.youtube.com/watch?v=-nFWcKHIUN4