CA-SHIFTLEFT
ShiftLeft, Inc ., an innovator in automated application security testing, today announced that its Chief Scientist, Fabian Yamaguchi, and Security Research Engineer, Claudiu-Vlad Ursache, will give a presentation focused on Ghidra2cpg at the No Hat Conference in Bergamo, Italy on November 20, 2021. The No Hat 2021 is a security conference organized to bring together specialists, professionals and hobbyists operating in the field of computer security and privacy.
Event Details:
Who:
Fabian Yamaguchi, Chief Scientist and Claudiu-Vlad Ursache, Security Research Engineer, ShiftLeft
What:
Virtual Session: Presentation on Ghidra2cpg: From graph queries to vulnerabilities in binary code
When:
Saturday, November 20, 2021, 11:15am – 12:00pm CET
Where:
Centro Congressi Giovanni XXIII - Bergamo, Italy
For more information, visit : https://www.nohat.it/program
Session Abstract - Ghidra2cpg: From graph queries to vulnerabilities in binary code
Uncovering bugs in source code is hard enough as it is, but when all you have is a binary, the importance of tooling becomes undeniable. Disassemblers such as IDA Pro, Ghidra, BinaryNinja or Radare2 provide a strong foundation for an investigation but are designed primarily to assist in what remains a manual investigation. This leaves room for partial automations that make the discovery process less painful.
Fabian and Claudiu were looking to design a search tool for binary code that allows them to uncover instances of programming patterns linked to vulnerabilities - at scale and for multiple major instruction sets. In this talk, they will present ghidra2cpg, an extension for the open-source code mining platform Joern that enables it to process binary code. Together, Joern and ghidra2cpg enable you to quickly uncover the attack surface, search for variants of known vulnerabilities, and gather information interactively using a query language.
In this session they will show how to write queries for the system that describe bugs in source code and introduce corresponding queries for binary code, highlighting what's harder and what is easier to describe when looking at the machine code directly. They will also be looking at modern consumer-grade router firmware and may drop a zero-day or two in the process.
About Fabian Yamaguchi
Fabian is Chief Scientist at ShiftLeft Inc and an Associate Professor Extraordinary at Stellenbosch University. He has over 15 years of experience in the security domain, where he has worked as a security consultant and researcher, focusing on manual and automated vulnerability discovery. Throughout his work, he has identified previously unknown vulnerabilities in popular system components and applications such as the Microsoft Windows kernel, the Linux kernel, the Squid proxy server, and the VLC media player. He has presented his findings and techniques at both major industry conferences such as BlackHat USA, DefCon, First, and CCC, and renowned academic security conferences such as ACSAC, Security and Privacy, and CCS. He holds a master’s degree in computer engineering from Technical University Berlin, as well as a PhD in computer science from the University of Goettingen.
About Claudiu-Vlad Ursache
Claudiu-Vlad Ursache is a Security Research Engineer at ShiftLeft, having recently entered cybersecurity after a decade of writing software. In his day-to-day job he builds static analysis tools and his current research focuses on IoT firmware.
About ShiftLeft
ShiftLeft enables software developers and application security teams to radically reduce the attackability of their applications by providing near-instantaneous security feedback on software code during every pull request. By analyzing application context and data flows in near real-time with industry leading accuracy, ShiftLeft empowers developers and appsec team to find and fix the most serious vulnerabilities faster. Using its patented graph analysis that combines code attributes and analyzes actual attack paths based on real application architecture, ShiftLeft’s platform scans for attack context and pathways typical of modern applications, across APIs, OSS, internal microservices and first-party business logic code, and then provides detailed guidance on risk remediation within existing development workflows and tooling. ShiftLeft CORE, a unified code security platform, combines the company’s flagship NextGen Static Analysis (NG SAST), Intelligent Software Composition Analysis (SCA), and contextual security training through ShiftLeft Educate to provide developers and application security teams the fastest, most accurate, most relevant, and easiest to use automated application security and code analysis platform.
Backed by Bain Capital Ventures, Mayfield, Thomvest Ventures, and SineWave Ventures, ShiftLeft is based in Santa Clara, CA. To learn how ShiftLeft keeps AppSec in sync with the rapid pace of DevOps, see https://www.shiftleft.io/ .
View source version on businesswire.com: https://www.businesswire.com/news/home/20211117005403/en/
Link:
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Enginzyme and AGC Create Scalable Process for Key mRNA Ingredient12.1.2026 06:00:00 CET | Press release
At the mRNA Health conference in Berlin, enginzyme and AGC Inc. presented a scalable process to produce a key mRNA vaccine and therapy ingredient, N1-methylpseudouridine-5'-triphosphate (m¹ΨTP). The rapid growth of mRNA-based vaccines and therapeutics has driven significant demand for modified nucleotides like m¹ΨTP, which enhances mRNA stability and expression, while reducing immunogenicity. Enginzyme is a deep-tech company delivering optimized biomanufacturing solutions through cell-free enzyme engineering technology. AGC Inc. is a leading global player in fields spanning from architectural glass to chemicals and life science. AGC Inc. provides services in a wide range of life science fields, from synthetic pharmaceuticals and agrochemicals, to biopharmaceuticals and leading-edge cell and gene therapies, as well as messenger RNAs. The presentation in November detailed the latest collaboration between the companies, with a focus on the biomanufacturing of nucleotides for mRNA therapy,
Ant International Partners with Google’s Universal Commerce Protocol to Expand AI Capabilities12.1.2026 02:15:00 CET | Press release
Ant International, a leading global payment, digitisation, and financial technology provider, is collaborating on the launch of Google’s Universal Commerce Protocol (UCP), a new open standard for agentic commerce that works across the entire shopping journey — from discovery and buying to post-purchase support. UCP establishes a common language for agents and systems to operate together across consumer surfaces, businesses, and payment providers to enable commerce. So instead of requiring unique connections for every individual agent, UCP enables all agents to interact easily. UCP is built to work across verticals and is compatible with existing industry protocols like Agent2Agent (A2A), Agent Payments Protocol (AP2), and Model Context Protocol (MCP). “For agentic commerce to scale, it’s critical for the industry to align on a common set of standards. We are proud to have Ant International endorse the Universal Commerce Protocol as the foundation for that future,” said Ashish Gupta, VP
Torq Secures $140M Series D at $1.2B Valuation to Lead the AI SOC and Agentic AI Era11.1.2026 17:59:00 CET | Press release
Fueled by Massive Customer Adoption of AI Agents, Torq Scales the World’s First True AI SOC Platform and Accelerates Expansion into the U.S. Federal Market Torq, the established Agentic AI security operations pioneer, today announced it has closed a massive $140 million Series D funding round, propelling its valuation to $1.2 billion and total funding to $332M. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260112510774/en/ Led by Merlin Ventures—a leading cybersecurity fund renowned for its deep access to the U.S. commercial and Public Sector markets—with participation from all existing investors, including Evolution Equity Partners, Notable Capital, Bessemer Venture Partners, Insight Ventures Partners, and Greenfield Partners, this capital injection is a definitive investment in the future of security. Torq is driving the industry’s critical shift: the complete transformation of the Security Operations Center (SOC) through
Andersen udvider sine kompetencer med tilføjelsen af Scimitar9.1.2026 21:44:00 CET | Pressemeddelelse
Andersen Consulting har indgået en samarbejdsaftale med Scimitar, der er et firma med fokus på at accelerere innovation i biovidenskabsbranchen. Scimitar, der har hovedkvarter i USA, et førende konsulenthus inden for strategieksekvering for biovidenskabsbranchen. Virksomheden er specialiseret i design af driftsmodeller, digital transformation og organisatorisk forandring. Scimitar samarbejder med medicinal- og biotech-virksomheder om at accelerere innovation, styrke den driftsmæssige eksekvering og sikre compliance gennem hele produkters livscyklus. Deres praktiske og samarbejdsorienterede tilgang sikrer løsninger, der ikke blot er formålstjenlige, men også skalerbare. "Virksomheder inden for biovidenskabsbranchen befinder sig i en tid med hurtige videnskabelige fremskridt, stigende regulatorisk kompleksitet og et voksende behov for operationel agilitet, samtidig med at de holdes op mod de højeste standarder for patientsikkerhed og dataintegritet," udtaler Ramy Khalil, CEO i Scimitar.
Biocytogen and Acepodia Expand Collaboration Through Option-based Evaluation Framework for First-in-Class Bispecific and Dual-Payload ADCs (BsAD2C)9.1.2026 13:00:00 CET | Press release
Expanded collaboration builds on Acepodia and Biocytogen’s recent co-development efforts to evaluate selected bispecific antibody and dual-payload ADC programs Biocytogen Pharmaceuticals (Beijing) Co., Ltd. (Biocytogen, SSE: 688796; HKEX: 02315) and Acepodia (6976:TT), today announced that the companies have entered into an option and license agreement designed to enable the structured evaluation of bispecific antibody-drug conjugate (BsADC) programs to further advance the development of dual-payload bispecific antibody-drug conjugates (BsAD2Cs). The agreement grants Acepodia an option to obtain an exclusive worldwide license from Biocytogen for two BsADC programs. Under the terms of the agreement, Biocytogen is eligible to receive an upfront option fee and, upon Acepodia’s exercise of the option, additional payments including option exercise fees, development, regulatory, and commercial milestone payments, as well as royalties on future product sales. The financial terms of the agreem
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom