Trail of Bits

@trailofbits

We help secure the world’s most targeted organizations and products. We combine security research with an attacker mentality to reduce risk and fortify code.

New York, NY

Joined March 2010

249Following

34KFollowers

Pinned

Trail of Bits@trailofbits · Jun 11

We reported a chain of CVEs to Apple, reviewed anti-cheat measures for ~5M Monopoly GO! players, and published the Custodial Stablecoin Rekt Test for evaluating issuer security. Read the June Tribune: mailchi.mp/trailofbits/tr…

6.0K

Trail of Bits@trailofbits · Jul 21

ToB vs. Alex Aiken's PhD students

TTrail of Bits@trailofbits · Jul 21

TOOL RELEASE: Detect plagiarized code even when variable names change and comments disappear. Vendetect uses semantic fingerprinting to catch copied code that traditional tools miss. blog.trailofbits.com/2025/07/21/det…

2.0K

Trail of Bits@trailofbits · Jul 21

trailofbits's tweet card. Vendetect is our new open-source tool for detecting copied and vendored code between repositories. It uses semantic fingerprinting to identify similar code even when variable names change or comments...

12.0K

Trail of Bits@trailofbits · Jul 16

I feel like ToB are the only ones covering attacks against/via MCP - it's such a fascinating new attack surface that we're going to have to contend with more and more I feel

TTrail of Bits@trailofbits · Jul 16

MCP security issues are well-documented, and now new defensive tools and testing strategies are emerging to help developers secure their implementations. 🧵

2.0K

Trail of Bits@trailofbits · Jul 17

Pwndbg makes GDB and LLDB debugging actually usable for security research. @disconnect3d_pl shows stack canary analysis, heap inspection, and exploit development @europython today at 10:30 AM GMT+2 ep2025.europython.eu/session/pwndbg…

trailofbits's tweet card. This talk will introduce Pwndbg:a plugin for GDB + LLDB to make debugging suck less and which is helpful for exploit development and security research

3.0K

Trail of Bits@trailofbits · Jul 11

Security questions? Our researchers and interns are @SummerC0n through tomorrow. See you there 👋

2.0K

Trail of Bits Retweeted

Clint Gibler@clintgibler · Jul 10

📚 tl;dr sec 287 ☁️ fwd:cloudsec Talk Recordings, 🛡️ How Figma Only Runs Approved Software, 🤖 Auditing Code with AI Join Scott Behrens and me: How to do Secure Code Review with Vibe Coding IDEs! Hundreds of people have already signed up 🤯 tldrsec.com/p/tldr-sec-287

3.0K

Trail of Bits Retweeted

Feisty Duck@feistyduck · Jun 30

Cryptography & Security Newsletter is out! In this issue: - Internet PKI to Integrate DNSSEC - Short News feistyduck.com/newsletter/iss…

2.0K

Trail of Bits Retweeted

Feisty Duck@feistyduck · Jun 26

Google paid Trail of Bits to audit Go cryptography. The results are good. go.dev/blog/tob-crypt…

3.0K