Warning: Undefined array key 0 in /var/www/tgoop/function.php on line 65

Warning: Trying to access array offset on value of type null in /var/www/tgoop/function.php on line 65
1299 - Telegram Web
Telegram Web
tgoop.com » United States » » Telegram Web
Alaid TechThread
Compromising Garmin’s Sport Watches: A Deep Dive into GarminOS and its MonkeyC Virtual Machine

https://www.anvilsecure.com/blog/compromising-garmins-sport-watches-a-deep-dive-into-garminos-and-its-monkeyc-virtual-machine.html
Anvil Secure
Compromising Garmin's Sport Watches: A Deep Dive into GarminOS and its MonkeyC Virtual Machine - Anvil Secure
I reversed the firmware of my Garmin Forerunner 245 Music back in 2022 and found a dozen or so vulnerabilities in their support for Connect IQ applications. They can be exploited…
201 views
Alaid TechThread
Testing and Fuzzing the Kubernetes Admission Configuration


https://troopers.de/downloads/troopers23/TR23_TestingAndFuzzingTheKubernetes.pdf
229 views
Alaid TechThread
CSRFing VS Code's Debug Adapter Protocol

https://www.mcnulty.blog/posts/dap-csrf
www.mcnulty.blog
CSRFing VS Code's Debug Adapter Protocol
A technical write-up for a cross-site request forgery vulnerability present in some Debug Adapter Protocol implementations. The Debug Adapter Protocol is used by VS Code and other development tools to debug programs. The write-up details the vulnerability…
409 views
Alaid TechThread
FUZZING ’23
2nd International Fuzzing Workshop papers

https://dl.acm.org/doi/pdf/10.1145/3605157
ACM Conferences
Proceedings of the 2nd International Fuzzing Workshop | ACM Conferences
It is our great pleasure to welcome you to the 2nd International Workshop on Fuzzing (FUZZING 2023), co-located with ISSTA in Seattle, Washington, USA on 17 July 2023. This workshop is the continua...
246 views
Alaid TechThread
Fuzz4All: Universal Fuzzing via Large Language Models

https://arxiv.org/pdf/2308.04748.pdf
199 views
Alaid TechThread
AI-Powered Fuzzing: Breaking the Bug Hunting Barrier

https://security.googleblog.com/2023/08/ai-powered-fuzzing-breaking-bug-hunting.html
Google Online Security Blog
AI-Powered Fuzzing: Breaking the Bug Hunting Barrier
Dongge Liu, Jonathan Metzman, Oliver Chang, Google Open Source Security Team  Since 2016, OSS-Fuzz has been at the forefront of automated v...
225 views
Alaid TechThread
Android Goes All-in on Fuzzing

https://security.googleblog.com/2023/08/android-goes-all-in-on-fuzzing.html
Google Online Security Blog
Android Goes All-in on Fuzzing
Posted by Hamzeh Zawawy and Jon Bottarini, Android Security Fuzzing is an effective technique for finding software vulnerabilities. Over ...
227 views
Alaid TechThread
ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP

https://arxiv.org/pdf/2308.02122.pdf
226 views
Alaid TechThread
https://github.com/intel/tsffs

A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS
GitHub
GitHub - intel/tsffs: A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS
A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS - intel/tsffs
181 views
Alaid TechThread
LLMs at the Forefront Pioneering the Future of Fuzz Testing

https://www.youtube.com/watch?v=k9gt7MNXPDY
YouTube
DEF CON 31 - LLMs at the Forefront Pioneering the Future of Fuzz Testing - X
Large Language Models are already revolutionizing the software development landscape. As hackers we can only do what we've always done, embrace the machine and use it to do our bidding.

There are many valid criticisms of GPT models for writing code like…
224 views
Alaid TechThread
The WebP 0day

https://blog.isosceles.com/the-webp-0day/
Isosceles Blog
The WebP 0day
Early last week, Google released a new stable update for Chrome. The update included a single security fix that was reported by Apple's Security Engineering and Architecture (SEAR) team. The issue, CVE-2023-4863, was a heap buffer overflow in the WebP image…
474 views
Alaid TechThread
OWASP Top 10 for LLM

https://llmtop10.com
OWASP Top 10 for LLM & Generative AI Security
OWASP Top 10: LLM & Generative AI Security Risks
Discover the OWASP Top 10 security risks for Large Language Models (LLMs) and Generative AI. Learn how to protect your AI systems from emerging threats with expert guidance and best practices
496 views
Alaid TechThread
Chalk™ captures metadata at build time, and can add a small 'chalk mark' (metadata) to any artifacts, so they can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this.

https://github.com/crashappsec/chalk
GitHub
GitHub - crashappsec/chalk: Chalk allows you to follow code from development, through builds and into production.
Chalk allows you to follow code from development, through builds and into production. - crashappsec/chalk
239 views
Alaid TechThread
Snapshot fuzzing direct composition with WTF

https://blog.talosintelligence.com/snapshot-fuzzing-direct-composition-with-wtf/
Cisco Talos Blog
Snapshot fuzzing direct composition with WTF
Although there is public research on Direct Composition, only a few discuss fuzzing this feature, and none, to our knowledge, that covers snapshot fuzzing.
229 views
Alaid TechThread
Fuzzer Development: The Soul of a New Machine

https://h0mbre.github.io/New_Fuzzer_Project/
184 views
Alaid TechThread
CNCF Fuzzing Handbook

https://github.com/cncf/tag-security/blob/main/security-fuzzing-handbook/handbook-fuzzing.pdf
227 views
Alaid TechThread
Do Language Models Learn Semantics of Code? A Case Study in Vulnerability Detection

https://arxiv.org/pdf/2311.04109.pdf
290 views
Alaid TechThread
FASER: Binary Code Similarity Search through the use of Intermediate Representations

https://arxiv.org/pdf/2310.03605.pdf
293 views
Alaid TechThread
White-box Compiler Fuzzing Empowered by Large Language Models

https://arxiv.org/pdf/2310.15991.pdf
228 views
Alaid TechThread
Escaping the sandbox: A bug that speaks for itself

https://microsoftedge.github.io/edgevr/posts/Escaping-the-sandbox-A-bug-that-speaks-for-itself/
Microsoft Browser Vulnerability Research
Escaping the sandbox: A bug that speaks for itself
Introduction
214 views
2025/06/30 13:17:39
Back to Top
HTML Embed Code: