Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

blog.trailofbits.com

Trail of Bits Blog

Get the latest updates from Trail of Bits Blog directly as they happen.

Follow now 696 followers

Latest posts

Last updated about 15 hours ago

A few notes on AWS Nitro Enclaves: KMS integration

about 16 hours ago

Nitro Enclaves and Key Management Service (KMS) feel like a natural fit...

Building secure Uniswap v4 hooks

7 days ago

Uniswap v4 hooks let developers add custom behavior to pools, including dynamic...

How we use /goal to find bugs in Patch the Planet

9 days ago

Codex’s /goal feature amplifies bug hunting, but getting good results requires the...

Rust-proof your code with our new Testing Handbook chapter

24 days ago

We’ve added a new chapter to our Testing Handbook: a comprehensive guide...

Mutation testing comes to DAML

29 days ago

In April we released Mewt, our open-source mutation-testing engine that finds the...

Field reports from Patch the Planet

about 1 month ago

We’re running Patch the Planet, an ongoing collaboration with OpenAI that pairs...

Shipping post-quantum cryptography to Python

about 1 month ago

Post-quantum cryptography is now one pip-install away for the entire Python ecosystem...

Introducing Patch the Planet

about 1 month ago

What happens when you clear dozens of Trail of Bits engineers’ schedules...

Factoring "short-sleeve" RSA keys with polynomials

about 2 months ago

What happens when the bits of an RSA private key are heavily...

The sorry state of skill distribution

2 months ago

Public skill marketplaces are being flooded with malicious skills that steal credentials...

We hardened zizmor's GitHub Actions static analyzer

3 months ago

In March 2026, attackers exploited a pull_request_target misconfiguration in the aquasecurity/trivy-action GitHub...

Go fuzzing was missing half the toolkit. We forked the toolchain to fix it.

3 months ago

Go’s native fuzzing is useful, but it stands far behind state-of-the-art tooling...