We are excited to announce our partnership with the @LinuxFoundation's Post-Quantum Cryptography Alliance (PQCA)! We will further share our ongoing PQC research and engineering efforts and join key industry players helping organizations securely transition to and adopt PQC.

This sounds like a trivial observation and it isn’t: No organization which makes its people pay for coffee wants to win.

one day this will be part of an elaborate exploit chain

This is a great post on modern alternatives to certificate pinning.

EVERYBODY SHUT UP the plane they use to fly the horses from all over the world to the Olympics for the equestrian events is called AIR HORSE ONE

Regeringen och SD hatar verkligen Sverige.

A few months back we published an overview of the cryptography services within AWS. Today you can check out our next post in this series which covers the cryptography within the Google Cloud Platform. If you’re using cryptography in the cloud, check out these posts

AIxCC final qualifiers and $2mil prize winners: 42-b3yond-6ug all_you_need_is_fuzzing_brain Lacrosse Shellphish Team Atlanta Theori Trail of Bits

Ny forskning: om man regelbundet hör andra prata om klimatförändringarna ökar tron på det går att påverka politiken att göra något åt det. Konservativas uppfattning om klimatet särskilt känslig för social påverkan. Så fortsätt snacka klimat! supermiljobloggen.se/nyheter/klimat…

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability msrc.microsoft.com/update-guide/v…

Two days ago, National Institute of Standards and Technology finalized three post-quantum cryptography standards. Today, we are announcing an open-source Rust implementation of one of these standards, SLH-DSA, now available in RustCrypto! blog.trailofbits.com/2024/08/15/we-…

iVerify Discovers Severe Android Vulnerability Impacting Millions of Devices Around the World. The vulnerability leaves millions of devices susceptible to man-in-the-middle (MITM) attacks and other dangerous malware and spyware. bit.ly/3SQE2k6

OK, this is the only software license you should use

This is a thorough report from RAND on historical analogues to inform AI governance. The section on encryption mirrors what I’ve been communicating to policy makers and publicly for over a year now. Like cryptography, AI + cyber is a fundamentally dual use technology.

Excited to share that Discord has shipped E2EE for audio/video + open sourced our protocol (daveprotocol.com) and core library (github.com/discord/libdave) + third party Trail of Bits review (github.com/trailofbits/pu…). Great work, Stephen Birarda and team!