Mayhem Blog

In this post, we'll explore Docker Scout's strengths and weaknesses as an SBOM/SCA tool and compare vulnerability results before and after runtime analysis.

Compare SBOM and SCA formats to find the best fit for your needs. Learn key differences and how to streamline vulnerability management.

This blog post will explore why application fuzzing is important and how it can complement protocol fuzzing in automotive development.

In this blog post, we will demonstrate how Mayhem can be used to easily set up fuzzing campaigns in embedded systems, using IoTGoat’s dnsmasq as an example.

Let’s talk about the challenges of delivering global scale software and the things engineering teams can do to improve reliability.

Testing low-level code such as IEEE 1394 (FireWire) can be a challenge. The solution lies in extracting kernel functions and testing them like unit tests.

Learn how to test third-party image libraries with Mayhem, using CVE-2024-28578 - an exploitable vulnerability in the FreeImage library - as an example.

In this blog post, we’re going to attempt to use Debian and its packages to build a mini time machine and investigate the vulnerability of packages across time.

In this blog, we’ll do a quick comparison of CAN vs. Ethernet and go over some of the strengths and weaknesses of both in the context of automotive systems.