Mayhem Blog

Expert insights and tips on application security, API security, and other DevSecOps topics.

What’s New: August 2024

We’ve improved import/export capabilities, refined our analysis of Windows targets, and launched the first iteration of automated defect tracking.

Why Automotive Developers Shouldn't Overlook Application Fuzzing

This blog post will explore why application fuzzing is important and how it can complement protocol fuzzing in automotive development.

How to Test Embedded Systems Security Easily with Mayhem

In this blog post, we will demonstrate how Mayhem can be used to easily set up fuzzing campaigns in embedded systems, using IoTGoat’s dnsmasq as an example.

Lessons from Today’s CrowdStrike Outage: How to Navigate Software Release Challenges

Let’s talk about the challenges of delivering global scale software and the things engineering teams can do to improve reliability.

Meet the Mayhem Team at Blackhat 2024

We’re excited to announce that Mayhem will be attending and will have a booth at Black Hat 2024. We look forward to connecting with you!

The Hacker Mind Podcast

The Hacker Mind Podcast: Inside DARPA's Cyber Grand Challenge

DARPA’s Cyber Grand Challenge in 2016 showed the world what's coming -- autonomous adversaries. Go behind the scenes with Team ForAllSecure.

Code Security

Get Started With DevSecOps

In a TechRepublic Whiteboard video, host Bill Detwiler speaks to Dr. David Brumley, Carnegie Mellon University professor and CEO of ForAllSecure, about the ways organizations can benefit by using DevSecOps.

The Hacker Mind Podcast

The Hacker Mind Podcast: Inside DEF CON’S Champion CTF Team PPP

After winning DEF CON's annual Capture The Flag (CTF) competition five of the last seven years, the Plaid Parliament of Pwning (PPP) returns as the reigning champions during very different conditions because of COVID 19. How is the team preparing?

Code Security

The Fuzzing Files: The Anatomy of a Heartbleed

In 2014, two independent teams used fuzz testing to discover the Heartbleed vulnerability which affected systems providing banking, online retail, and other secure transactions.

The Hacker Mind Podcast

Mayhem Makers

ForAllSecure Launches The Hacker Mind Podcast

In the inaugural episode, The Hacker Mind looks at why the West Point Military Academy, and other organizations within the DoD, is training its young cadets to hack.

Mayhem Makers

FuzzCon TV Tackles Federal Fuzz Testing

Continuing FuzzCon from earlier this year, ForAllSecure is hosting a series of follow-up sessions online this one related to federal software systems.

Mayhem Makers

FuzzCon TV Tackles Federal Fuzz Testing

Following a successful FuzzCon event held in person at RSAC in San Francisco earlier this year, ForAllSecure is continuing the discussion with a series of follow-up sessions online called FuzzCon TV.

Code Security

Life As A Professional Hacker

Last month Guido Vranken hosted a successful Reddit AMA , sharing insight on his experience as a professional vulnerability researcher.

Code Security

Challenging ROI Myths Of Static Application Security Testing (SAST)

Mel Llaguno raises six challenges to Static Application Security Testing (SAST) analysis, raising questions on the efficacy of SAST for organizations focused on immediate benefits.

Fancy some inbox Mayhem?

Subscribe to our monthly newsletter for expert insights and news on DevSecOps topics, plus Mayhem tips and tutorials.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.