How can we measure the Return on Security Investment (RoSI) of Bug Bounty programs? @ygoltsev and I have explored various numbers to find answers, and we'd like to share our ideas with you - https://t.co/Qxy4YKPiit! #ROI#bugbounty#metrics#okr
Let me say that again...
You store pointers at the _destination_ address of a memcpy.
You glitch during memcpy ().
You get that pointer into PC.
No, it's not sci-fi. It's the "instruction corruption" fault model. And we pioneered that.
See thread below 1/N.
Application Security and Vulnerability Assessment getting a significant advantage from GenAI (context-driven knowledgebase). That helps security teams understand the root cause of the problem faster and significantly reduces the latency in producing security fixes at scale.
"... detected several remotely exploitable bugs in AMI MegaRAC BMC"
"... whole attack sequence: from having zero knowledge about a remote AMI BMC with enabled IPMI (yeah, right) to flashing a persistent firmware implant to the server SPI flash"
Looking forward to this talk!
Also found interesting, that ChatGPT works much better if you ask to use LangSec approach: translate logic into grammar, and input as a language and try to find a Weird Machine, works more efficient at my example than just "check the pseudocode/logic for security issues"
📝New research by @lmpact_l: "Fork Bomb for Flutter"
There are more and more Flutter applications, and security analysis of these apps is in high demand. Our member Phil shares his knowledge and presents his reFlutter tool.
Read the article: https://t.co/8sLDdgB8Ul