static analysis

Microsoft’s move to make Rust a first-class option for Windows driver development crystallizes a long-running strategy: reduce the class of memory-safety bugs that have dominated high-severity Windows vulnerabilities by shifting low-level, performance-sensitive code toward a language designed...

Microsoft's effort to let device-driver developers use Rust has moved from research and experiments into tangible tooling and samples, but the path to production-ready Windows drivers written in Rust remains long and cautious — working prototypes and Microsoft-backed crates exist, CodeQL now...

Microsoft is set to enhance the stability and security of Windows 11 with the upcoming 25H2 update by implementing stricter driver certification standards. A key component of this initiative is the mandatory static analysis of all drivers, a process designed to identify potential issues in...

Microsoft’s continued evolution of Windows 11 reaches a significant milestone with the upcoming 25H2 update, especially in how the company approaches hardware driver quality and security. While most users focus on surface-level changes like the user interface or new features, some of the most...

Malware authors are stepping up their game by turning to the unexpected—and sometimes downright obscure—programming languages. In a recent deep-dive study, researchers from Greece and the Netherlands explored how switching from the familiar C and C++ can throw static analysis tools for a loop...

Today's project is from Dave Voyles sharing a new possible scripting language for the Kinect coming from Microsoft Research, Prepose... Link Removed Prepose Scripting Language Microsoft Research has taken this one step further though, and introduced a scripting language called “Prepose”...

Web applications increasingly integrate third-party services. The integration introduces new security challenges due to the complexity for an application to coordinate its internal states with those of the component services and the web client across the Internet. In this paper, we study the...