Countering the 'Trusting Trust' Compiler Attack through Diverse Double-Compiling
David A. Wheeler's Page on Countering 'Trusting Trust' through Diverse Double-Compiling (DDC) - Countering Trojan Horse attacks on Compilers
Read the full articleYou might also wanna read
Proof-or-Stop: Don't Trust the Agent, Trust the Evidence -- Loop Engineering for Verifiable Evidence-Gated Lifecycle Control
arXiv:2607.14890v1 Announce Type: new Abstract: Autonomous coding agents increasingly execute multi-step software work, but lifecycle states
CVE-2026-15029: CWE-822: Untrusted Pointer Dereference in ASUS System Control Interface v3
CVE-2026-15029 is a high-severity vulnerability in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manage
Developer Proposes Cryptographic Two-Channel Architecture to Counter Prompt Injection
A developer writing on DEV Community argues that prompt injection in large language models is best understood as a control/data boundary pro
MCP Attack Vectors: Tool Poisoning, Prompt Injection, and How to Defend Against Them
A practical guide to MCP security threats — tool poisoning, prompt injection, supply chain attacks, and shadow servers — with real-world inc
DirtyFree: A Simplified Data-Oriented Programming Exploitation Technique for the Linux Kernel (NDSS 2026)
Research artifacts for "DirtyFree: Simplified Data-Oriented Programming in the Linux Kernel" (NDSS 2026) - MPI-SysSec/DirtyFree
github.com·9d ago
An unintimidating introduction to the dark arts of C/C++ vulnerabilities
Following the addition of C/C++ security scanning to Snyk Open Source, we discuss some common C/C++ vulnerabilities and ways to mitigate the
Comments
Sign in to join the conversation.
No comments yet. Be the first.