Russian hackers community - DEFCON Russia, DC#7812. http://defcon-russia.ru

This newly revised and expanded second edition of the popular Artech House title, Fuzzing for Software Security Testing and Quality Assurance, provides practical and professional guidance on how and why to integrate fuzzing into the software development lifecycle. This edition introduces fuzzing as a process, goes through commercial tools, and explains what the customer requirements are for fuzzing. The advancement of evolutionary fuzzing tools, including American Fuzzy Lop (AFL) and the emerging full fuzz test automation systems are explored in this edition. Traditional software programmers and testers will learn how to make fuzzing a standard practice that integrates seamlessly with all development activities. It surveys all popular commercial fuzzing tools and explains how to select the right one for software development projects.This book is a powerful new tool to build secure, high-quality software taking a weapon from the malicious hacker's arsenal. This practical resource helps engineers find and patch…

В честь совершеннолетия проекта 0х18-й эпизод мы решили посветить проекту NoiSeBit и рассказать зачем это все, как начиналось и эволюцианировало. Ведущий этого выпуска Алексей Синцов (@asintsov) беспрестрастно мучает вопросами Алесандра Матросова (@matrosov).

https://t.me/NoiSeBit_News

Duo’s security team explores how the T2 coprocessor is being used by Apple and how it fits into the larger system security model, as well as how this may evolve in the future.

What is GLitch? GLitch is one part of our series of Rowhammer attacks. We started by breaking the EDGE browser and the cloud. Then we moved towards Android devices showing how to root them with bit flips. This time we wanted to show that also mobile phones can be attacked remotely via the browser. Meet GLitch: … Continue reading GLitch →

Researchers have discovered eight new "Spectre-class" vulnerabilities in Intel CPUs, which also affect at least a small number of ARM processors and may impact AMD processor architecture as well.

Arbitrary code execution with kernel privileges using CVE-2018-8897. - can1357/CVE-2018-8897

UPDATE: Enigmail and GPG Tools have been patched for EFAIL. For more up-to-date information, please see EFF's Surveillance Self-Defense guides.UPDATE (5/14/18): More information has been released.

Remote zero-click JavaScript code execution on signal desktop message app. Thanks @HacKanCuBa and @julianor https://t.co/YgT8akGfBI

Surveillance Valley: The Secret Military History of the Internet. A book by Yasha Levine.

Spies, counterinsurgency campaigns, hippie entrepreneurs, privacy apps funded by the CIA. From the 1960s to the 2010s — you'll never look at the Internet the same again.

An ARM board that fits inside your USB connector