Inception: A simple XOR can cause a Microarchitectural Stack Overflow(comsec.ethz.ch)

113 points by ndesaulniers 3 years ago | 16 comments

ZenHammer: Rowhammer attacks on AMD Zen-based platforms(comsec.ethz.ch)

313 points by transpute 2 years ago | 128 comments

MileSan: Detecting μ-Architectural Leakage via Differential HW/SW Taint Tracking(comsec.ethz.ch)

9 points by vogr 1 year ago | 0 comments

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)

657 points by spiridow 1 year ago | 219 comments

Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.

Using LLMs to Generate Fuzzers(verse.systems)

136 points by moyix 2 years ago | 23 comments

Fuzzing the PHP Interpreter via Dataflow Fusion(arxiv.org)

30 points by todsacerdoti 1 year ago | 3 comments