Experiences from Evaluating Fuzzers on the Contiki-NG Network (Hay)Stack 

In this paper, we report our findings from using state-of-the-art mutation-based
and hybrid fuzzers (AFL, Angora, Honggfuzz, Intriguer, MOpt-AFL, QSym, and SymCC) on a non-trivial code base, that of Contiki-NG, to expose and fix serious vulnerabilities in various layers of its network stack, during a period of more than three years. Learn more.

From: Clément Poncelet, Konstantinos Sagonas, Nicolas Tsiftes

Blender: Automatic Whole-Program Fuzzing

• GitHub Copilot X Adopts GPT-4
  

  GitHub Copilot is evolving to bring chat and voice interfaces, support pull requests, answer questions on docs, and adopt OpenAI’s GPT-4 for a more personalized developer experience.  Learn more.

  From: Thomas Dohmke
  

• Fuzzing Finds CVE in Spring.io
  

  Security researches discovered a CVE in the Spring framework which causes a Denial-of-Service if exploited, using Jazzer and OSS-Fuzz. Learn more.

  From: David Merian
  

This Week's Discussions

• Call to ruby Regex Through C Api From C Code Not Working
  From: SomeNerd

• OWASP ZAP Pitchfork?
  From: smthamazing