Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederblog.trailofbits.com
Trail of Bits Blog
Get the latest updates from Trail of Bits Blog directly as they happen.
Follow now 693 followers
Latest posts
Last updated 10 days ago
Rust-proof your code with our new Testing Handbook chapter
10 days ago
We’ve added a new chapter to our Testing Handbook: a comprehensive guide...
Mutation testing comes to DAML
15 days ago
In April we released Mewt, our open-source mutation-testing engine that finds the...
Field reports from Patch the Planet
21 days ago
We’re running Patch the Planet, an ongoing collaboration with OpenAI that pairs...
Shipping post-quantum cryptography to Python
23 days ago
Post-quantum cryptography is now one pip-install away for the entire Python ecosystem...
Introducing Patch the Planet
about 1 month ago
What happens when you clear dozens of Trail of Bits engineers’ schedules...
Factoring "short-sleeve" RSA keys with polynomials
about 1 month ago
What happens when the bits of an RSA private key are heavily...
The sorry state of skill distribution
about 2 months ago
Public skill marketplaces are being flooded with malicious skills that steal credentials...
We hardened zizmor's GitHub Actions static analyzer
2 months ago
In March 2026, attackers exploited a pull_request_target misconfiguration in the aquasecurity/trivy-action GitHub...
Go fuzzing was missing half the toolkit. We forked the toolchain to fix it.
2 months ago
Go’s native fuzzing is useful, but it stands far behind state-of-the-art tooling...
C/C++ checklist challenges, solved
3 months ago
We recently added a C/C++ security checklist to the Testing Handbook and...
Extending Ruzzy with LibAFL
3 months ago
LibAFL is all the rage in the fuzzing community these days, especially...
Trailmark turns code into graphs
3 months ago
We’re open-sourcing Trailmark, a library that parses source code into a queryable...