fuzzing

What does optimal software security analysis look like?

August 31, 2023

In this Help Net Security interview, Kevin Valk, co-CEO at Codean, discusses the consequences of relying solely on automated tools for software security. He explains how these …

Google delivers secure open source software packages

April 13, 2023

Google has announced the Google Cloud Assured Open Source Software (Assured OSS) service, which aims to be a trusted source of secure open source packages, and the deps.dev …

Vulnerabilities in cryptographic libraries found through modern fuzzing

January 13, 2023

Recently patched vulnerabilities in MatrixSSL and wolfSSL, two open-source TLS/SSL implementations / libraries for embedded environments, have emphasized the great potential …

CI Fuzz CLI: Open-source tool simplifies fuzz testing for C++

September 26, 2022

Fuzz testing helps developers protect their applications against memory corruptions, crashes that cause downtime, and other security issues, including DoS and uncaught …

A malicious document could lead to RCE in Apache OpenOffice (CVE-2021-33035)

September 22, 2021

Apache OpenOffice, one of the most popular open-source office productivity software suites, sports a RCE vulnerability (CVE-2021-33035) that could be triggered via a specially …

Google aims to improve security of browser engines, third-party Android devices and apps on Google Play

October 5, 2020

Google has announced two new security initiatives: one is aimed at helping bug hunters improve the security of various browsers’ JavaScript engines, the other at helping …

Microsoft open-sources tool that enables continuous developer-driven fuzzing

September 16, 2020

Microsoft has open-sourced OneFuzz, its own internal continuous developer-driven fuzzing platform, allowing developers around the world to receive fuzz testing results …

New fuzzing tool for USB drivers uncovers bugs in Linux, macOS, Windows

May 28, 2020

With a new fuzzing tool created specifically for testing the security of USB drivers, researchers have discovered more than two dozen vulnerabilities in a variety of operating …

Vulnerabilities in smart card drivers open systems to attackers

August 13, 2018

Security researcher Eric Sesterhenn of X41 D-SEC GmbH has unearthed a number of vulnerabilities in several smart card drivers, some of which can allow attackers to log into …

Microsoft opens fuzz testing service to the wider public

July 28, 2017

Microsoft Security Risk Detection, a cloud-based fuzz testing service previously known under the name Project Springfield, is now open to all and sundry. Fuzz testing (i.e. …

Google found over 1,000 bugs in 47 open source projects

May 9, 2017

In the last five months, Google’s OSS-Fuzz program has unearthed over 1,000 bugs in 47 open source software projects, and it’s ready to integrate even more of …

Project Springfield: Cloud-based fuzz testing for uncovering million-dollar bugs

September 27, 2016

This Moday Microsoft debuted Project Springfield, a cloud-based fuzz testing (aka fuzzing) service that the company has been working on for a quite a while. David Molnar and …