News

Vulnerability Development Courses for 2021

AUGUST 16, 2021

UPDATE: Postponed. Unfortunately due to travel restrictions related to COVID we will be postponing these trainings until February 14, 2022. We are contacting current registered students and giving them the option of a refund...

Read More

Fuzzing Grammars in Python: gramfuzz

JANUARY 3, 2017

Grammar-based fuzzing is not new, nor is my grammar-based fuzzer; however, this is my fifth, best, and favorite rewrite of it. My grammar fuzzer started with the original version in ruby, and then over the years...

Read More

Firmware Updates Made Easy

SEPTEMBER 8, 2016

Contributors: David Barksdale of Exodus Intelligence, Independent Security Researcher Jeremy Brown These are two vulnerabilities that allow a remote unauthenticated attacker to update firmware. If the device is configured with MAC or IP filtering, the...

Read More

VxWorks: Execute My Packets

AUGUST 9, 2016

Contributors David Barksdale and Alex Wheeler 1. Background Earlier this year we reported 3 vulnerabilities in VxWorks to Wind River. Each of these vulnerabilities can be exploited by anonymous remote attackers on the same network without...

Read More

Exodus announces new acquisition program for both Zero-Day and N-Day vulnerabilities

AUGUST 9, 2016

Exodus Intelligence has unveiled the new Research Sponsorship Program (RSP), focused on acquiring vulnerability research and exploits from the global cybersecurity research community. While continuing to acquire Zero-Day research, the RSP is the first...

Read More

Building real Zero-Day analysis into your risk assessment

AUGUST 1, 2016

Security analysts are in a daily struggle to understand their risk profile, constantly working to capture the state of their attack surface, assess the total risk that it presents and prioritize their efforts to...

Read More

Twistlock and Exodus partner to identify apps with Zero-Day vulnerabilities in your containers

JULY 27, 2016

Container-based deployments are becoming more and more common in the enterprise, with Docker usage doubling from 2015 to 2016[1]. One of Docker’s primary strengths is the convenience it provides in packaging and distributing applications,...

Read More

Exodus Intelligence Announces Zero-Day Access for Enterprises

JULY 27, 2016

Offering allows enterprise customers to consume critical vulnerability metadata. Austin, TX – July 26, 2016 – Exodus Intelligence, the leader in vulnerability discovery, analysis, and exploitation, today announced two new metadata subscriptions targeted at enterprise customers that...

Read More

EXODUS INTELLIGENCE JUNE 2016 NEWSLETTER

JULY 5, 2016

What happened at Exodus Intelligence in the month of June? It’s all here, in the Exodus Intelligence June 2016 newsletter!

Read More

Zero Days & IoT with Dan Lamorena of Forescout Technologies–Part 1

JULY 5, 2016

Our good friend, Dan Lamorena of Forescout Technologies, is creating a series of blogs centered around zero-days and IoT. In this series, he’ll be interviewing cybersecurity experts to discuss what they’re seeing out there in the “Wild,...

Read More