In The News Today
PRESS RELEASE: ObjectSecurity Assessed “Awardable” for Department of Defense Work in the CDAO’s Tradewinds Solutions Marketplace
San Diego, CA – November 6, 2024 – ObjectSecurity, a leader in solving complex, evolving defense and industrial cybersecurity and supply chain risk challenges [...]
Openpmf Projects
The following list contains only a few of ObjectSecurity's OpenPMF projects, including subcontracts. If you're looking for specific information on these projects, we encourage [...]
Large Language Models (LLMs) & Cybersecurity – Navigating the Dual-Edged Sword
The integration of Large Language Models (LLMs) has transformed data processing and human-computer interaction across various sectors. With this leap forward come both significant [...]
PRESS RELEASE: DTRA awards ObjectSecurity $1.1M “NLC-ADP” Software Cybersecurity Contract
San Diego, Calif. – October 10, 2024 – ObjectSecurity, a leader in solving complex, evolving defense and industrial cybersecurity and supply chain risk challenges, today [...]
The Limits of SAST: Predicting the User
In SAST (static application security testing), source code is analyzed without being executed. SAST can be used to detect buffer overflows, injection flaws, and [...]
Fort Meade Tech Expo 2024
Come see our team at the Fort Meade Tech Expo at Club Meade September 17, 2024 0830-1300 6600 Mapes Rd, Fort [...]
“Rewrite it in Rust”: A Brute Force Approach to Memory Safety
In Exploring Memory Safety in Critical Open Source Projects, CISA, the FBI, and other foreign cyber security agencies report that approximately 52% of critical [...]
CrowdStrike: A Lesson in Memory Safety
This blog post discusses the recent CrowdStrike incident where a flawed update caused blue screen errors (BSODs) on Windows systems, leading to widespread disruptions. [...]
How can a Stack Buffer Overflow be used to Execute Arbitrary Code?
The article explains Stack-based Buffer Overflow attacks (CWE-121), highlighting their mechanisms, severe consequences, and the lack of protections in embedded devices. It illustrates exploitation [...]
PRESS RELEASE: NIST Awards ObjectSecurity OT Cybersecurity Grant
San Diego, Calif. – June 24, 2024 – ObjectSecurity, a leader in solving complex, evolving defense and industrial cybersecurity and supply chain risk challenges, today [...]
A Deep Dive into the Recent Eclipse ThreadX CVEs: Who’s Affected?
This blog post discusses two newly discovered CVEs affecting Eclipse ThreadX before version 6.4.0: CVE-2024-2214 and CVE-2024-2212. Discovered by Humanativa Group, these vulnerabilities involve [...]
DCP: Data Cleansing Platform
Process dirty data from potentially many different sources into clean, usable data - easily and effectively. Request a Demo Dirty [...]
SCRAMS: Supply Chain Risk Analytics and Management Solution
ObjectSecurity SCRAMS™ (Supply Chain Risk Analysis and Management Solution) helps organizations analyze and manage supply chain risks by processing procurement data into actionable insights. [...]
OpenPMF™ Zero Trust Access Policy Automation
OpenPMF 4.0 offers a comprehensive Zero Trust platform that makes access control effective and manageable through automation and intelligence. It helps manage and enforce [...]
PRESS RELEASE: DARPA Awards ObjectSecurity $1.5M Embedded Device Analysis Contract
San Diego, Calif. – May 24, 2024 – ObjectSecurity, a leader in solving complex, evolving defense and industrial cybersecurity and supply chain risk challenges, today [...]
Finding Segmentation Faults in Binary Machine Code: Comparing Different Approaches
The blog post explores different approaches to finding segmentation faults in binary machine code. It compares static analysis, fuzzing, and concolic analysis. While static [...]
You Should be Automating Binary Reverse Engineering: Here’s Why.
Binary reverse engineering is a luxury not many can afford. Up until now, there haven't been options to automate and scale the skills and [...]
Detecting the xz-utils Backdoor with Automation
In this ObjectSecurity blog post, we discuss how automated binary vulnerability analysis helps detect advanced attacks such as the recently discovered "xz-utils backdoor", which [...]