Trail of Bits ✓

@trailofbits · New York, NY · joined 28 Mar 2010

We help secure the world’s most targeted organizations and products. We combine security research with an attacker mentality to reduce risk and fortify code.

39 115Followers

261Following

4 350Posts total

496.3KViews on collected posts

Latest posts

Trail of Bits ✓@trailofbits4 Sep

aiohttp is downloaded 600M+ times a month. Its maintainers just recapped a year of security work, including the 10 issues (8 CVEs) we reported through Patch the Planet. Every fix shipped days later in 3.14.1. https://t.co/ypN1yhzt0h 2.8K views · 25 likes · 4 reposts · 2 replies Open on X →

Trail of Bits ✓@trailofbits3 Sep

1,535 potential bugs found, 1,017 awaiting patches, 326 fixes open upstream, 192 merged. Since Aug 4: +398 bugs, +46 merged, 55 codebases under review, and scapy has overtaken vllm as the most-reported codebase in Patch the Planet. https://t.co/dDV7RUbxgQ 4K views · 33 likes · 11 reposts · 0 replies Open on X →

Trail of Bits ✓@trailofbits31 Aug

We launched as a trusted auditor for Signal's Automatic Key Verification, watched GPT 5.6-Cyber chain three 0-days into a VM escape, and found a Provenance bug representing ~$500K in drainable HASH. Plus 8 new public reviews, 2 open-source tools, and more. August Tribune: https: 9.6K views · 107 likes · 10 reposts · 8 replies Open on X →

Trail of Bits ✓@trailofbits27 Aug

We signed the call for collective action. Across 3 months, we audited 50 open-source projects using frontier cyber models. To date, we've found 1,268 potential issues and wrote 298 patches. Critical infrastructure around the world carries the same technical debt, but has far 12.6K views · 109 likes · 8 reposts · 13 replies Open on X →

Trail of Bits ✓@trailofbits26 Aug

@trailofbits What if you just keep asking it to escape and patch all the zero days it finds? And repeat this indefinitely. Wouldn’t the VM become secure enough to contain the agents? 10.3K views · 43 likes · 0 reposts · 8 replies Open on X →

Trail of Bits ✓@trailofbits26 Aug

@trailofbits Wait, people trust QEMU as a sandbox? 🫪 I always got stuck in kernel dev because it’s virtualization was unrealistic, there are probably so many bugs. 5.8K views · 35 likes · 0 reposts · 0 replies Open on X →

Trail of Bits ✓@trailofbits26 Aug

We asked GPT 5.6-Cyber to escape a VM used to sandbox agents. It broke out three times. In its final escape, the agent found three 0-days on its own and chained them into a working exploit. https://t.co/3JRVWgPxHx 451.3K views · 1.6K likes · 313 reposts · 65 replies Open on X →

Against accounts of the same size

7 posts from the last 90 days, next to the 10K–100K follower range. shown widely, but few of those viewers react.

Median views9 604this account924median for 10K–100K

Reach, %24.55%this account3.62%median for 10K–100K

Engagement, %1.06%this account1.52%median for 10K–100K

Metric	This account	Median for 10K–100K	Ratio
Median views per post	9 604	924	10.4×
Reach (views ÷ followers)	24.55%	3.62%	6.78×
Engagement rate	1.06%	1.52%	0.69×

Others in this range → Compare with another account → How these benchmarks are built →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.