Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederblog.trailofbits.com
Trail of Bits Blog
Get the latest updates from Trail of Bits Blog directly as they happen.
Follow now 692 followers
Latest posts
Last updated about 14 hours ago
Mutation testing comes to DAML
about 14 hours ago
In April we released Mewt, our open-source mutation-testing engine that finds the...
Field reports from Patch the Planet
7 days ago
We’re running Patch the Planet, an ongoing collaboration with OpenAI that pairs...
Shipping post-quantum cryptography to Python
9 days ago
Post-quantum cryptography is now one pip-install away for the entire Python ecosystem...
Introducing Patch the Planet
16 days ago
What happens when you clear dozens of Trail of Bits engineers’ schedules...
Factoring "short-sleeve" RSA keys with polynomials
27 days ago
What happens when the bits of an RSA private key are heavily...
The sorry state of skill distribution
about 1 month ago
Public skill marketplaces are being flooded with malicious skills that steal credentials...
We hardened zizmor's GitHub Actions static analyzer
about 2 months ago
In March 2026, attackers exploited a pull_request_target misconfiguration in the aquasecurity/trivy-action GitHub...
Go fuzzing was missing half the toolkit. We forked the toolchain to fix it.
about 2 months ago
Go’s native fuzzing is useful, but it stands far behind state-of-the-art tooling...
C/C++ checklist challenges, solved
2 months ago
We recently added a C/C++ security checklist to the Testing Handbook and...
Extending Ruzzy with LibAFL
2 months ago
LibAFL is all the rage in the fuzzing community these days, especially...
Trailmark turns code into graphs
3 months ago
We’re open-sourcing Trailmark, a library that parses source code into a queryable...
We beat Google’s zero-knowledge proof of quantum cryptanalysis
3 months ago
Two weeks ago, Google’s Quantum AI group published a zero-knowledge proof of...