Mayhem Case Studies

Expert insights and tips on application security, API security, and other DevSecOps topics.

View All
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Demystifying A Docker Image

Demystifying A Docker Image

Six months ago ForAllSecure started analyzing Docker images. What does this mean? Imagine we have a user who wants us to fuzz their application. How do they give it to us? Do they tar it up? Do they give us access to an environment where it’s running?
Decipher Security Podcast With ForAllSecure CEO David Brumley

Decipher Security Podcast With ForAllSecure CEO David Brumley

On April 24, ForAllSecure CEO David Brumley joins Decipher Security host, Dennis Fisher, to talk about the importance of software security as well as the need for better cooperation between developers and security teams.
Top Takeaways From The “Knowing The Unfuzzed And Finding Bugs With Coverage Analysis” Webinar

Top Takeaways From The “Knowing The Unfuzzed And Finding Bugs With Coverage Analysis” Webinar

ForAllSecure Researcher, Mark Griffin, introduces viewers to automated coverage analysis, a workflow that helps users gain additional value from fuzzing.
Uncovering OpenWRT Remote Code Execution (CVE-2020-7982)

Uncovering OpenWRT Remote Code Execution (CVE-2020-7982)

ForAllSecure Researcher, Guido Vranken walks readers through his workflow for uncovering for OpenWRT remote code execution vulnerability.
ForAllSecure's Response To COVID-19

ForAllSecure's Response To COVID-19

David Brumley shares the company's initiatives to keep the community safe during COVID-19 while remaining committed to our customers.
Top 3 Trends At ShmooCon 2020

Top 3 Trends At ShmooCon 2020

Richard Bae, Director of Federal Solutions at ForAllSecure, shares the top 3 trends he and his team observed at ShmooCon 2020.
Top 3 Webinar Takeaways: “Continuous Fuzzing: The Trending Security Technique Among Silicon Valley's Tech Behemoths”

Top 3 Webinar Takeaways: “Continuous Fuzzing: The Trending Security Technique Among Silicon Valley's Tech Behemoths”

Dr. David Brumley, ForAllSecure CEO, demystifies a proven DevSecOps technique known as continuous fuzzing, and further details on how organizations can get started.
Uncovering Vulnerabilities In Open Source Libraries (CVE-2019-13499)

Uncovering Vulnerabilities In Open Source Libraries (CVE-2019-13499)

ForAllSecure Engineer Maxwell Koo walks readers through a technical case study on fuzzing open source libraries using FreeImage as an example.
ForAllSecure Uncovers Critical Vulnerabilities In Das U-Boot (CVE-2019-13103)

ForAllSecure Uncovers Critical Vulnerabilities In Das U-Boot (CVE-2019-13103)

ForAllSecure interns, Paul Emge and Zion Basque, uncover four vulnerabilities in Das U-Boot, a common bootloader on embedded devices, including Amazon Kindles, ARM Chromebooks, networking hardware, and more.

Fancy some inbox Mayhem?

Subscribe to our monthly newsletter for expert insights and news on DevSecOps topics, plus Mayhem tips and tutorials.

By subscribing, you're agreeing to our website terms and privacy policy.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.