Cryptography · Hardware · Embedded Cryptography On Embedded Devices 101 When talking about “crypto on embedded devices”, the conversation almost always collapses into two questions: what are my physical constraints and what security assumptions I need to reach ? It turns out that picking a primitive once you know all of the device you’re handed…
Spoofing the Sky breaking RTKLIB, the brain behind centimeter-accurate GPS. RTKLIB turns raw satellite signals into centimeter-level position fixes for ships, drones, aircraft and self-driving machines. We found four memory-corruption bugs in its correction- and observation-stream decoders, reachable from the very data those machines are designed to trust. What is RTK, and why should you…
Solana’s Virtual machine & crypto syscall pwned Deep dive into an Agave cryptographic syscall vulnerability Ayooo, who said “battle-tested” crypto integrations and deeply embedded cryptographic primitives are safe? Introduction As CTF players and security researchers, we spend most of our time digging into low-level systems things just to “see how it works”, (this is our…
Exploiting n-day in the wild Reproducing CVE-2026-23111: How one character can change everything To prepare for Pwn2Own Berlin 2026, we decided to reproduce a known kernel CVE on Red Hat (kernel 6.12.0-124.38.1.el10_1, which was the latest version at the time). We chose the nf_tables subsystem because we were not very familiar with it and wanted to better…
Solana audit and tooling Sol-azy: audit-friendly overviews for Solana programs New feature Recap added to sol-azy! (See this article if you don’t know what is sol-azy) What’s new? The new feature Recap turns an Anchor project into a compact, audit-friendly report that you can skim in minutes. It walks the repository, aligns the IDL with the #[derive(Accounts)] definitions, and writes…
OWASP AppSEC days france FuzzingLabs at OWASP AppSec Days France 2025 We’re excited to announce that FuzzingLabs will be present and sponsoring OWASP AppSec Days France 2025! This yearly event brings together security experts, researchers, and developers to share knowledge on the latest in application security. Our team will be on-site to discuss cutting-edge topics…
RingZer0 2025 – Training Announcement Applied AI/LLM for Android APK Reversing and Analysis Unlock the next level of Android security analysis in our hands-on AI-Augmented Reverse Engineering training. You will learn to wield both local and online Large Language Models to accelerate decompilation, automate Frida script generation, and supercharge your workflow in Jadx and Ghidra….
Hardware virtualization Introduction to KVM & Hardware Virtualization Virtualization has become a huge part in production environments, in traditional IT or in the cloud, improving security, development cycles and maintenance. This technology is the cornerstone that allows us to build isolated sandboxes, drastically shorten the time it takes to provision new servers, and perform hardware…
Solana Static analyzer Introducing sol-azy: A CLI Toolkit for Solana Program Static Analysis & Reverse Engineering This post dives into sol-azy, our new all-in-one toolkit for security research. Helping in reversing, analyzing, and poking at Solana programs statically, surgically, and on your terms. You can clone it from our GitHub https://github.com/FuzzingLabs/sol-azy What Problem Does sol-azy…
applied AI for Cybersecurity Benchmarking LLM agents for vulnerability research AI agents appear to be a powerful tool for advancing vulnerability research and securing modern applications. At FuzzingLabs, we decided to take a deep dive into this topic to assess its real-world potential. We conducted experiments by building AI agents using various LLMs, with the…
| Cookie | Duration | Description |
|---|---|---|
| cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
| cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
| cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
| cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. |
| cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |