Trail of Bits
@trailofbits
We help secure the world’s most targeted organizations and products. We combine security research with an attacker mentality to reduce risk and fortify code.
261 Following 39.3K Followers
This is chilling to read and demonstrates the most pernicious threat of agentic cyber attacks: recursive vulnerability. It’s one thing for any of us to write insecure code—possible but preventable, and increasingly so with our robotic sidekicks—and quite another to be compromised by a dependency seven layers deep.
You relied on software that relied on software that relied on software … that relied on software that we all agreed was safe, but suddenly wasn’t.
Assuming anything about the safety of your dependencies is now complacency.
Show more
We signed the call for collective action. Across 3 months, we audited 50 open-source projects using frontier cyber models. To date, we've found 1,268 potential issues and wrote 298 patches.
Critical infrastructure around the world carries the same technical debt, but has far fewer defenders. It will take the entire industry working together to fix it.
Show more
An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle.
An off-the-shelf VM is not enough to contain a modern, cyber-capable AI agent. AI agent escaped a VM three times. First via known bugs, then via missed patches, then it found 0-days and chained them. AI can hack, and agents can persist, research, adapt, and weaponize software flaws faster than patch cycles can handle it.
Show more
AI is calling in all of our security debt, all at the same time.
Most sandboxes were never very secure, but that didn't matter because expertise was scarce and effort was expensive. Not so in 2026.
Show more
We asked GPT 5.6-Cyber to escape a VM used to sandbox agents. It broke out three times.
In its final escape, the agent found three 0-days on its own and chained them into a working exploit.
Show more
We found a bug that lets any user grant themselves admin access to live financial assets on Provenance, a Cosmos SDK chain.
82 token accounts were exploitable, representing ~$500K in drainable HASH. Now patched.
Show more
The cryptography implementation for Full-Chain Membership Proofs (FCMP++) has successfully been audited by Trail of Bits!
'The review produced six informational findings. Zero high, medium, and low-severity findings were discovered.'
Show more
Another shoutout, this time to our Bronze sponsors!
@kududyn
@Nightwing_usa
@trailofbits
@OpenAI
@Battelle
@redballoonsec
See you next weekend in NYC for a great CTF and fun lightning talks!
defenders can see the future, and have a narrow window to uplevel their cybersecurity practices now.
key is to uplevel fundamentals and apply the best AI tools.
what we’re doing at OpenAI, and where other organizations can start:
Show more
MAGIC Grants recently had @trailofbits, a leading cybersecurity and research firm, audit certain cryptography for Monero's forthcoming FCMP++ upgrade. This upgrade will substantially increase the privacy of Monero transactions.
Read more:
Show more
Aviation got safe by assuming aircrafts could fail.
Plane systems might break, so critical systems are duplicated and no single failure is allowed to matter.
Balancer V3 security works the same way, in four different layers. 🧵
Show more
🔑 Signal introduces Automatic Key Verification to enhance security by confirming that encryption keys match user identifiers and detecting possible man-in-the-middle attacks. It uses key transparency and third-party audits from Cloudflare and Trail of Bits
Show more
To all Solana, Cosmos & Cairo auditors/developers out there.
@trailofbits has a list of common security vulnerabilities to watch for in your next audit/project.
WhatsApp Unveils New Scam Alert Feature
Signal’s new security feature checks if your encrypted chats were tampered with - - @signalapp - #Signal# #Encryption# #Privacy# #Cybersecurity# #CyberSecurityNews# #SecurityNews#
Show more
Signal adds new security feature to thwart man-in-the-middle attacks
PATCH THE PLANET BUG SPOTLIGHT: We found a medium-severity bug in aiohttp, Python's HTTP engine that had 600M+ downloads last month. Denys Pakizh caught oversized requests dodging its size limits. Now patched. CVE-2026-54277 in the dashboard:
Show more
Last year @trailofbits won second place in the AIxCC and released buttercup. It's a tool they built during the challenge and released.
I took that code and migrated it to golang. As any reasonable person would, i stripped out all the sandbox wrappers focusing only on the workflow.
That code in combination with a fast, cheap, and intelligent model resulted in 5 verfied vulnerabilities across 25 git repos in less than 2 hours and cost about $3. Once verified i asked the model to write PoCs. It worked.
Show more
We’ve engaged @trailofbits, in collaboration with OpenAI, to audit noble-curves.
No severe issues were found. A new release v2.3 is out.
Pretty cool that auditors are sending patches now! More info:
Show more
We're a day-one auditor for @signalapp's new Automatic Key Verification, which depends on external auditors to confirm everyone sees the same keys.
We built our auditing software from scratch, open-sourced it, and run it as a public good.
Show more
