Writing secure and stable software shouldn't be hard. Mastodon: @CodeIntelligenc[email protected]
Bonn, Germany
Joined January 2019
- Tweets883
- Following302
- Followers951
- Likes584
Code Intelligence retweeted
AI-automated fuzzing found a potential vulnerability in wolfSSL!
Join @wolfSSL & @CI_Fuzz for a webinar where we'll demo how AI-driven fuzz testing works and uncover a heap-based use-after-free vulnerability!
📅 Feb 26 | 9 AM PT / 6 PM CET
Register now: us02web.zoom.us/webinar/regi…
Code Intelligence retweeted
AI-powered fuzz testing uncovers a critical vulnerability in #wolfSSL! Thanks to @CI_Fuzz, the issue was swiftly resolved in wolfSSL 5.7.6. This breakthrough demonstrates the power of AI-driven security testing. Encourage developers to update to the latest version of wolfSSL!!
Code Intelligence retweeted
Dr. Eric Brüggemann, former BCG and Thinkproject executive will lead @CI_Fuzz through continued international expansion. #ChiefExecutiveOfficer #CEO #leader #growth #AI #SoftwareSecurity buff.ly/3XbeFLv
Code Intelligence retweeted
✨ CI Spark
LLM-Powered AI-Assistant for auto generating fuzz tests
Automatically identify fuzzing candidates (public function entry points)
Generates code in JS/TypeScript, Java, and C/C++
Can be augmented by existing test code
By @khaledyakdan
code-intelligence.com/blog/c…
Code Intelligence retweeted
We have found a new vulnerability in Oracle's MySQL JDBC Driver (CVE-2023-21971)
The vulnerability can lead to unauthorized update, insert, or delete DB access as well as arbitrary code execution.
The package is continuously fuzzed by Jazzer in OSS-Fuzz.
code-intelligence.com/blog/c…
Code Intelligence retweeted
Join me on April 18th for a live webinar on web app fuzzing for secure & robust APIs.
Covers:
- #JUnit integration
- Bug detectors (RCE, SQLI, etc.)
- IDE support for debugging
- CI/CD integration
- Demo a @springboot app with #OSS tooling for you to try
code-intelligence.com/webina…
Code Intelligence retweeted
Jazzer has found a DoS vulnerability in the Spring Framework (CVE-2023-20861).
A specially crafted SpEL expression can cause an OutOfMemoryError when a large string is supplied to the repeat operator.
@springcentral is continuously tested in OSS-Fuzz.
code-intelligence.com/blog/e…
Code Intelligence retweeted
Code Intelligence announced the integration of its recently open-sourced JavaScript fuzz testing engine, Jazzer.js, into Jest, the most used unit testing framework for JavaScript.
Read more ➡ devm.io/javascript/fuzz-test…
#javascript
Code Intelligence retweeted
Testing: Code Intelligence integriert Fuzz-Testing in Jest heise.de/news/Testing-Code-I… #Fuzzing #JavaScriptFramework
Code Intelligence retweeted
Code Intelligence @CI_Fuzz announced that it has integrated its open-source JavaScript fuzz testing engine, Jazzer_js, into Jest, a unit testing framework for JavaScript. buff.ly/3XRymGc
Code Intelligence retweeted
Jazzer.js now features integration in Jest.
Now, you can write fuzz tests for your #JavaScript projects in @fbjest as easily as regular unit tests.
Moreover, you get IDE support for debugging and test coverage reporting out of the box.
Blog post: code-intelligence.com/blog/f…
Code Intelligence retweeted
#JavaScript support is coming soon to OSS-Fuzz!
Thanks to @halbecaf and @metzmanj for the collaboration and support!
Looking forward to onboarding the first projects and helping uncover (and fix) the first bugs!
Code Intelligence retweeted
#CodeIntelligence confirms that it is adding support for #JavaScript into OSS-Fuzz, Google’s platform for continuous #fuzzing for opensource software.
#cybersecurity #ApplicationSecurity opsmtrs.com/3YnWNfS
Code Intelligence retweeted
6 yrs since @Google OSS-Fuzz started, reached 850 projects, fixed 8,800 vulns & 28,000 stability bugs & next we are bumping up OSS-Fuzz rewards: more reward categories for improving coverage and horizontal leet rewards for impacting hundreds of projects - security.googleblog.com/2023…
Code Intelligence retweeted
OSS-Fuzz has had a significant impact on the security of open-source software and made fuzzing accessible to the open-source community.
Looking forward to more success in 2023 and continuing our collaboration with the #GOSST team.
6 yrs since @Google OSS-Fuzz started, reached 850 projects, fixed 8,800 vulns & 28,000 stability bugs & next we are bumping up OSS-Fuzz rewards: more reward categories for improving coverage and horizontal leet rewards for impacting hundreds of projects - security.googleblog.com/2023…
Code Intelligence retweeted
Last night was a successful kick-off for the 𝟐𝟎𝟐𝟑 𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐟𝐭𝐞𝐫𝐰𝐨𝐫𝐤 - 𝐌𝐮𝐧𝐢𝐜𝐡 𝐌𝐞𝐞𝐭𝐮𝐩 𝐄𝐯𝐞𝐧𝐭 𝐒𝐞𝐫𝐢𝐞𝐬 🙌 There were drinks, snacks, views and a live #fuzztesting demonstration.
Code Intelligence retweeted
We have the lovely colleagues from @CI_Fuzz with their fuzz testing solution as guests in our next Automotive Cybersecurity Afterwork Meetup.
📅Thursday, January 19, 2023, 6pm admission.
Free of charge.
Register here: meetup.com/de-DE/automotive-…
#Munich #Muenchen #Afterwork
Code Intelligence retweeted
Ho ho ho, me, (aka Java Claus) brought you an early Christmas present! 🎁
This is the first video of my new series on how to write robust and secure Java code, by unifying unit testing and fuzz testing into a single #JUnit workflow.
youtube.com/watch?v=rYSvBANQ…
Code Intelligence retweeted
Want to do something fun over the holidays? Why not play with this project? github.com/CodeIntelligenceT…
