Tags → #software security

Policy
Aeva Black Keynotes RustConf 2024 on Open Source Software
Nov 21, 2024 Aeva Black delivered the opening keynote at RustConf 2024, highlighting the importance of enhancing the security of open source software and discussing its significant economic impact.
Vulnerabilities
CWE Releases Top 25 List of Software Vulnerabilities
Nov 21, 2024 The Common Weakness Enumeration (CWE) Top 25 list has been released, identifying critical software vulnerabilities that require attention from developers and security professionals.
Tools
Increase in Leaked Secrets Reported by GitGuardian in 2023
Nov 21, 2024 In 2023, GitGuardian reported over 12 million instances of leaked secrets in public GitHub repositories, highlighting a significant rise in sensitive information exposure among developers.
Industry
Joshua Liebow-Feeser Presents at RustConf 2024 in Montreal
Nov 21, 2024 Joshua Liebow-Feeser, a Software Engineer at Fuchsia Security, presented on Rust's "X-safety" feature at RustConf 2024, highlighting its potential to enhance software reliability and address critical challenges in various domains.
Tools
New Tool Enhances Security in Software Environments
Nov 19, 2024 A novel tool called Code Annotation Logic (CAL) has been introduced to automate the identification of security-sensitive code components for isolation within Trusted Execution Environments, aiming to enhance application security and optimize the use of TEEs.
Tools
Framework Developed for Analyzing Cryptographic Functions in Binaries
Nov 14, 2024 The article discusses the development of a novel framework called FoC, which utilizes large language models to improve the identification and analysis of cryptographic functions in stripped binaries, addressing challenges faced in software security tasks.
Vulnerabilities
Study Reveals Security Risks in VS Code Extensions
Nov 13, 2024 A recent study has found that 5.6% of third-party extensions for Visual Studio Code exhibit suspicious behaviors, raising concerns about security vulnerabilities in software development environments.
Vulnerabilities
Google Advances AI for Software Vulnerability Discovery
Nov 11, 2024 On November 1, Google announced advancements in artificial intelligence for software vulnerability discovery, highlighting the successful identification of a buffer-underflow vulnerability in SQLite by its Big Sleep large language model agent.