Mayhem Blog

Secure software creates new possibilities. Businesses that did not exist before the creation of new software are today allowing us to share cars, share homes, stream from home, work from home and arrange, same day home delivery.

Hackers are charitable in ways that might surprise you. Whether it is in Africa or rural Arkansas, hackers find ways to use their skills for good reasons. Jake Daniel and Jason Kent return to The Hacker Mind to discuss the various ways hackers are helping society.

Security needs to be part of the development experience. This has given rise to the application security space. And, like the internet itself, it needs to evolve.

FuzzCon is back and will take place on Thursday, August 5, 2021, both in person in Las Vegas and online. This premier event will feature actionable advice and best practices on autonomous security, the state of application security and the role fuzzing plays in securing code.

DevSecOps is the expansion of DevOps that includes security professionals as well. The idea is for everyone to be looking at the code together, rather than in silos. This will produce the most robust and resilient software with the least amount of time and cost.

As we head to Hacker Summer Camp, how should we rebuild our infosec communities to be more inclusive and diverse? Jack Daniel offers his unique voice. As one of the founders of BSides and as a community advocate for Tenable, Jack provides guidance on how we can re-emerge successfully.

The acceleration of application development has shown no sign of stopping. As a result, we’re seeing increasingly complex, interconnected software. These forces are driving organizations to go beyond merely identifying common security errors or protecting against common attack techniques.

The Application Security Testing market is highly fragmented. From SAST to DAST to SCA to IAST to RASP, what is the best? Our answer: Autonomous testing through fuzz testing and symbolic execution.

I thought it’d be interesting to see what Mayhem produces in the hands of someone who knows the target API in and out -- my own.