Anvil Secure https://www.anvilsecure.com/ Wed, 22 Jul 2026 06:55:43 +0000 en-US hourly 1 https://wordpress.org/?v=6.6.5 https://www.anvilsecure.com/wp-content/uploads/2021/04/AnvilIcon6.png Anvil Secure https://www.anvilsecure.com/ 32 32 Internal AI Adoption Hackathon: What We Learned https://www.anvilsecure.com/blog/ai-adoption-hackathon.html https://www.anvilsecure.com/blog/ai-adoption-hackathon.html#respond Wed, 22 Jul 2026 06:55:43 +0000 https://www.anvilsecure.com/?p=7619 Anvil Secure's internal AI adoption hackathon gave engineers dedicated time to explore practical AI use cases. Technical Director Antonios Papadopoulos shares what the team learned and what comes next.

The post Internal AI Adoption Hackathon: What We Learned appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/ai-adoption-hackathon.html/feed 0 Identifying and Chasing RCE in SAP’s CommonCryptoLib https://www.anvilsecure.com/blog/identifying-and-chasing-rce-in-saps-commoncryptolib.html https://www.anvilsecure.com/blog/identifying-and-chasing-rce-in-saps-commoncryptolib.html#respond Thu, 16 Jul 2026 07:06:42 +0000 https://www.anvilsecure.com/?p=7581 Director of Research Tao Sauvage shares the latest chapter in his SAP research, chasing a bug from SAP's archive tool into CommonCryptoLib, a flaw reachable before authentication on SAP HANA. He breaks down the root cause and his attempts to exploit it.

The post Identifying and Chasing RCE in SAP’s CommonCryptoLib appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/identifying-and-chasing-rce-in-saps-commoncryptolib.html/feed 0 Finding Crown Jewels: Hunting Through 180,000 Ruby Gems https://www.anvilsecure.com/blog/finding-crown-jewels-hunting-through-180000-ruby-gems.html https://www.anvilsecure.com/blog/finding-crown-jewels-hunting-through-180000-ruby-gems.html#respond Wed, 17 Jun 2026 05:28:28 +0000 https://www.anvilsecure.com/?p=7526 CTO Vincent Berg mirrored more than 180,000 Ruby gems and built a scanner to analyse them at scale. What he uncovered offers a fascinating look at the hidden risks and exposed data scattered throughout the Ruby ecosystem.

The post Finding Crown Jewels: Hunting Through 180,000 Ruby Gems appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/finding-crown-jewels-hunting-through-180000-ruby-gems.html/feed 0 How We Use LLMs in Secure Code Review https://www.anvilsecure.com/blog/how-we-use-llms-in-secure-code-review.html https://www.anvilsecure.com/blog/how-we-use-llms-in-secure-code-review.html#respond Thu, 04 Jun 2026 01:00:39 +0000 https://www.anvilsecure.com/?p=7454 Director of Research Tao Sauvage breaks down how Anvil uses LLMs during secure code review, keeping human judgment at the center. He compares two approaches across three open-source targets to show why a structured workflow catches more vulnerabilities.

The post How We Use LLMs in Secure Code Review appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/how-we-use-llms-in-secure-code-review.html/feed 0 How We Test AI: LLM & GenAI Security Methodology at Anvil Secure https://www.anvilsecure.com/blog/llm-genai-security-methodology-at-anvil-secure.html https://www.anvilsecure.com/blog/llm-genai-security-methodology-at-anvil-secure.html#respond Wed, 27 May 2026 16:59:31 +0000 https://www.anvilsecure.com/?p=7444 From threat modeling and attack surface mapping to jailbreaks and prompt injection, Security Engineer George Damiris walks through how Anvil Secure tests LLM and GenAI systems for security vulnerabilities.

The post How We Test AI: LLM & GenAI Security Methodology at Anvil Secure appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/llm-genai-security-methodology-at-anvil-secure.html/feed 0 Demystifying Passkeys — Under the Hood: The Architecture https://www.anvilsecure.com/blog/demystifying-passkeys-under-the-hood-the-architecture.html https://www.anvilsecure.com/blog/demystifying-passkeys-under-the-hood-the-architecture.html#respond Wed, 13 May 2026 09:00:57 +0000 https://www.anvilsecure.com/?p=7401 In Part 2 of a three-part series, Security Engineer Matteo Giordano explores passkey architecture, covering origin binding, synced vs. device-bound credentials, authenticator types, and deployment quirks like key wrapping and signature counters.

The post Demystifying Passkeys — Under the Hood: The Architecture appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/demystifying-passkeys-under-the-hood-the-architecture.html/feed 0 Demystifying Passkeys — Under the Hood: The Protocol https://www.anvilsecure.com/blog/demystifying-passkeys-under-the-hood-the-protocol.html https://www.anvilsecure.com/blog/demystifying-passkeys-under-the-hood-the-protocol.html#respond Thu, 07 May 2026 01:00:22 +0000 https://www.anvilsecure.com/?p=7247 In Part 1 of a new series, security engineer Matteo Giordano walks through the mechanics behind passkeys, from the FIDO2 protocol stack to the raw data structures exchanged during registration and authentication.

The post Demystifying Passkeys — Under the Hood: The Protocol appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/demystifying-passkeys-under-the-hood-the-protocol.html/feed 0 Introducing OffTempo, Statistical Timing Side-Channel Analysis for Burp Suite https://www.anvilsecure.com/blog/introducing-offtempo-statistical-timing-side-channel-analysis-for-burp-suite.html https://www.anvilsecure.com/blog/introducing-offtempo-statistical-timing-side-channel-analysis-for-burp-suite.html#respond Wed, 29 Apr 2026 09:51:18 +0000 https://www.anvilsecure.com/?p=7211 Senior Security Engineer Riccardo Nannini introduces OffTempo, a Burp Suite extension designed to identify timing-based information leaks by comparing request patterns and analysing subtle differences in response times.

The post Introducing OffTempo, Statistical Timing Side-Channel Analysis for Burp Suite appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/introducing-offtempo-statistical-timing-side-channel-analysis-for-burp-suite.html/feed 0 What Breaks When Vulnerability Discovery Speeds Up https://www.anvilsecure.com/blog/what-breaks-when-vulnerability-discovery-speeds-up.html https://www.anvilsecure.com/blog/what-breaks-when-vulnerability-discovery-speeds-up.html#respond Thu, 23 Apr 2026 10:54:26 +0000 https://www.anvilsecure.com/?p=7198 Dana Hehl, Chief Operations Officer at Anvil Secure, reflects on what happens to vulnerability management programs when AI-driven discovery outpaces the processes built to triage and act on findings.

The post What Breaks When Vulnerability Discovery Speeds Up appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/what-breaks-when-vulnerability-discovery-speeds-up.html/feed 0 My First HammerCon: Reflections on a CTF Win https://www.anvilsecure.com/blog/my-first-hammercon-reflections-on-a-ctf-win.html https://www.anvilsecure.com/blog/my-first-hammercon-reflections-on-a-ctf-win.html#respond Thu, 09 Apr 2026 07:35:56 +0000 https://www.anvilsecure.com/?p=7168 From new face to CTF champion! Security Engineer Shoshana Makinen reflects on her first HammerCon and how she drew upon her experience, deduction, and persistence to win the 2026 CTF challenge.

The post My First HammerCon: Reflections on a CTF Win appeared first on Anvil Secure.

]]> https://www.anvilsecure.com/blog/my-first-hammercon-reflections-on-a-ctf-win.html/feed 0