Firefox will keep security-fix tests private for a week after release
Sec-high and sec-moderate fixes must ship without tests until the Tuesday after a Tuesday release.
Stories per day · 30 days
5 stories, newest first · one card per story
Stories tagged #security-testing
Building Sound Evaluation Practices for Rust-Based Security Frameworks
Researchers propose a reproducible way to evaluate Rust fuzzers and test it on 20 projects.
Forgeable Confirmation in Automated Computer Security Testing: Deterministic Rules versus AI Judges
Checks that trust attacker-controlled data can forge success verdicts in automated AI security testing.
Major Cyber Threat Detection Vendors Shift from MITRE to UK Testing Program
SE Labs launched PIVOT, a six-month vendor detection testing program backed by CrowdStrike, Fortinet, Palo Alto Networks and Sophos, as major vendors exit MITRE evaluations.
3
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
Filigran introduces Attack Chaining in OpenAEV to continuously simulate multi-stage attack paths, exposing gaps that isolated MITRE ATT&CK technique testing misses.
4