How would an attacker remotely take over a personal Linux or Android device? Or send a malicious link and get code execution through the browser? In this article, Andrey Konovalov explains how he extended a kernel fuzzer called syzkaller for this purpose, and how he managed to find a one-shot RCE in a non-public kernel flavor. Learn more. 

From Andrey Konovalov

Introducing AFL-Ruby: Fuzz Your Ruby Programs Using AFL

American Fuzzy Lop (AFL) is a popular fuzzer, traditionally used to find bugs in C and C++ code. python-afl and aflgo have adapted AFL for use with python and go, and now afl-ruby. Here’s how it works. Learn more. 

From: Richo Healy & Robert Heaton

In Other News

• Car Hacking: The Sirius XM Software Vulnerability 
  Newly revealed research shows that a number of major car brands, including Honda, Nissan, Infiniti, and Acura, were affected by a previously undisclosed security bug that would have allowed a savvy hacker to hijack vehicles and steal user data. Learn more.
  From: Sam Curry