Key Takeaways PHP2Shell exposes critical memory-safety vulnerabilities in PHP’s core engine, including a use-after-free that can be exploited to achieve remote code execution. RunSafe recreated the vulnerability and developed a working exploit that successfully...
Key Takeaways AI is exposing thousands of hidden software vulnerabilities. Anthropic’s Mythos uncovered confirmed bugs across major operating systems and browsers, including flaws that persisted for decades. Memory safety vulnerabilities pose a critical infrastructure...
A Software Bill of Materials (SBOM) is a machine-readable inventory of every component, library, and dependency inside a software application. Think of it as a detailed ingredient list that reveals exactly what’s bundled into your code—including the open source...
Artificial intelligence (AI) is reshaping how software is written and how vulnerabilities emerge. Developers are no longer limited to reusing open-source components or third-party libraries and instead are asking AI to build code on demand. This “vibe coding”...
Listen to the audio overview Even with decades of hard-earned security wisdom and modern verification tools, embedded software encounters the same kinds of bugs. Why do these mistakes keep showing up in code written by seasoned engineers? How do you write...
Ahoy, Vegas. RunSafe Security is headed to DEF CON 33 and we’re bringing serious energy to the high seas of cyber. This year, we’re proud to sponsor the Maritime Hacking Village (MHV), the destination at DEF CON for hackers, engineers, and tinkerers who want to get...
