quarkslab

Fuzzing complex state machines with LibAFL-QEMU and incremental snapshots.
We walk through our approach, revisit CVE-2026-9539 in libslirp, and explain why our initial fuzzing campaign missed it.
Fuzzer code is open source 🧑‍💻
🔗 Check it out: blog.quarkslab.com/snapshotting-o…

PQC is coming they say, but where is the actual code?
To help you map it out, our intern Joshua Setia looked at and tested 25 libraries, here is what he found:

➡️blog.quarkslab.com/state-of-post-…

Mbed TLS is a widely deployed open-source TLS, DTLS, and X.509 library targeting constrained and embedded environments.
A few months ago, our cryptography team performed a security audit of the changes in version 4.0, sponsored by @OSTIFofficial
➡️blog.quarkslab.com/mbedtls-securi…

ohhh we've got Off-by-One bugs
The internship season is 2026-2027 😒
Good catch @fredraynal !
Still finding bugs after all those years

Our 2025-2026 internship season is open.
Check out the list of openings and apply for fun and knowledge!
blog.quarkslab.com/internship-off…