Trail of Bits

Buttercup: Open-source AI-driven system detects and patches vulnerabilities

August 18, 2025

Buttercup is a free, automated, AI-powered platform that finds and fixes vulnerabilities in open-source software. Developed by Trail of Bits, it recently earned second place …

The Zoom attack you didn’t see coming

April 18, 2025

Did you know that when participating in a Zoom call, you can grant permission to other participants to control your computer remotely? While this feature may come in handy …

White House: Use memory-safe programming languages to protect the nation

February 27, 2024

The White House is asking the technical community to switch to using memory-safe programming languages – such as Rust, Python, Swift, C#, Java, and Go – to prevent …

Vulnerabilities in cryptographic libraries found through modern fuzzing

January 13, 2023

Recently patched vulnerabilities in MatrixSSL and wolfSSL, two open-source TLS/SSL implementations / libraries for embedded environments, have emphasized the great potential …

Trail of Bits iVerify: User-friendly iPhone security toolkit

December 18, 2019

Cybersecurity research and consulting firm Trail of Bits released iVerify, a user-friendly iPhone security toolkit, on the iOS App Store. iVerify makes it easy for users to …

GitHub Security Lab aims to make open source software more secure

November 15, 2019

GitHub, the world’s largest open source code repository and leading software development platform, has launched GitHub Security Lab. “Our team will lead by …