ShiftLeft to Present at No Hat Conference 2021
17.11.2021 11:00:00 EET | Business Wire | Press release
ShiftLeft, Inc., an innovator in automated application security testing, today announced that its Chief Scientist, Fabian Yamaguchi, and Security Research Engineer, Claudiu-Vlad Ursache, will give a presentation focused on Ghidra2cpg at the No Hat Conference in Bergamo, Italy on November 20, 2021. The No Hat 2021 is a security conference organized to bring together specialists, professionals and hobbyists operating in the field of computer security and privacy.
Event Details:
Who: Fabian Yamaguchi, Chief Scientist and Claudiu-Vlad Ursache, Security Research Engineer, ShiftLeft
What: Virtual Session: Presentation on Ghidra2cpg: From graph queries to vulnerabilities in binary code
When: Saturday, November 20, 2021, 11:15am – 12:00pm CET
Where: Centro Congressi Giovanni XXIII - Bergamo, Italy
For more information, visit: https://www.nohat.it/program
Session Abstract - Ghidra2cpg: From graph queries to vulnerabilities in binary code
Uncovering bugs in source code is hard enough as it is, but when all you have is a binary, the importance of tooling becomes undeniable. Disassemblers such as IDA Pro, Ghidra, BinaryNinja or Radare2 provide a strong foundation for an investigation but are designed primarily to assist in what remains a manual investigation. This leaves room for partial automations that make the discovery process less painful.
Fabian and Claudiu were looking to design a search tool for binary code that allows them to uncover instances of programming patterns linked to vulnerabilities - at scale and for multiple major instruction sets. In this talk, they will present ghidra2cpg, an extension for the open-source code mining platform Joern that enables it to process binary code. Together, Joern and ghidra2cpg enable you to quickly uncover the attack surface, search for variants of known vulnerabilities, and gather information interactively using a query language.
In this session they will show how to write queries for the system that describe bugs in source code and introduce corresponding queries for binary code, highlighting what's harder and what is easier to describe when looking at the machine code directly. They will also be looking at modern consumer-grade router firmware and may drop a zero-day or two in the process.
About Fabian Yamaguchi
Fabian is Chief Scientist at ShiftLeft Inc and an Associate Professor Extraordinary at Stellenbosch University. He has over 15 years of experience in the security domain, where he has worked as a security consultant and researcher, focusing on manual and automated vulnerability discovery. Throughout his work, he has identified previously unknown vulnerabilities in popular system components and applications such as the Microsoft Windows kernel, the Linux kernel, the Squid proxy server, and the VLC media player. He has presented his findings and techniques at both major industry conferences such as BlackHat USA, DefCon, First, and CCC, and renowned academic security conferences such as ACSAC, Security and Privacy, and CCS. He holds a master’s degree in computer engineering from Technical University Berlin, as well as a PhD in computer science from the University of Goettingen.
About Claudiu-Vlad Ursache
Claudiu-Vlad Ursache is a Security Research Engineer at ShiftLeft, having recently entered cybersecurity after a decade of writing software. In his day-to-day job he builds static analysis tools and his current research focuses on IoT firmware.
About ShiftLeft
ShiftLeft enables software developers and application security teams to radically reduce the attackability of their applications by providing near-instantaneous security feedback on software code during every pull request. By analyzing application context and data flows in near real-time with industry leading accuracy, ShiftLeft empowers developers and appsec team to find and fix the most serious vulnerabilities faster. Using its patented graph analysis that combines code attributes and analyzes actual attack paths based on real application architecture, ShiftLeft’s platform scans for attack context and pathways typical of modern applications, across APIs, OSS, internal microservices and first-party business logic code, and then provides detailed guidance on risk remediation within existing development workflows and tooling. ShiftLeft CORE, a unified code security platform, combines the company’s flagship NextGen Static Analysis (NG SAST), Intelligent Software Composition Analysis (SCA), and contextual security training through ShiftLeft Educate to provide developers and application security teams the fastest, most accurate, most relevant, and easiest to use automated application security and code analysis platform.
Backed by Bain Capital Ventures, Mayfield, Thomvest Ventures, and SineWave Ventures, ShiftLeft is based in Santa Clara, CA. To learn how ShiftLeft keeps AppSec in sync with the rapid pace of DevOps, see https://www.shiftleft.io/.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20211117005403/en/
Contact information
PR:
Corinna Krueger
ShiftLeft
ckrueger@shiftleft.io
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Cyviz: Microsoft’s Immersive Approach to Collaboration12.6.2026 10:00:00 EEST | Press release
Watch Video Case Study >> This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260612831180/en/ Watch Video Case Study >> https://www.cyviz.com/case-studies/microsoft-immersive-suite/ As business and technology environments grow more complex, establishing shared understanding across disciplines has become critical. The Immersive Suite is designed for active collaboration, where visual narratives, data, and technical content are explored interactively. This allows participants to test scenarios, align perspectives, and move more efficiently from discussion to decision. “We deliberately work with familiar tools like PowerPoint. That allows us to focus on storytelling and interaction rather than explaining technology, making collaboration more natural and effective,” says Joris Haverkort, Chief Technology Officer for Microsoft Netherlands. A key principle is simplicity at scale. Instead of relying on specialized tools, users build co
LTM Launches AI 1000 to Develop the Next Generation of Forward Deployed Engineers12.6.2026 09:14:00 EEST | Press release
LTM, the Business Creativity partner to the world’s largest enterprises, today announced AI 1000, a strategic workforce transformation initiative anchored by a dedicated Center of Excellence (CoE). The program will develop a pool of 1,000+ AI-certified engineers, including Forward Deployed Engineers (FDEs), to help enterprises adopt, deploy, and scale AI. The launch comes amid a major shift in enterprise tech talent. The FDE — among the fastest-growing roles in the AI ecosystem — combines the technical knowledge of LLMs and domain SLMs with business understanding to turn ideas into quantifiable ROI accretive outcomes and to drive client adoption. AI 1000 is LTM’s structured response to this shift: it provides the training, platforms, and governed career frameworks to develop FDEs at scale. AI 1000 takes an end-to-end approach to talent development via a four-stage model: Identify, Enable, Deploy, and Govern. It starts by identifying high-potential engineers using a proprietary AI Readi
NTT DATA Group Appoints Kazuhiko Nakayama as New President and Chief Executive Officer12.6.2026 09:00:00 EEST | Press release
NTT DATA Group, a global leader in AI, digital business and technology services, today announces that the Board of Directors has approved the appointment of Kazuhiko Nakayama as NTT DATA Group’s new President and Chief Executive Officer, effective June 12, 2026. Yutaka Sasaki, former President and CEO of NTT DATA Group, will assume the role of Senior Executive Vice President of NTT, Inc., effective June 18. Serving most recently as CFO of NTT DATA Group, Nakayama brings proven leadership and a depth of expertise and experience in defining business strategy and delivering growth. He will continue to strengthen the competitive advantages of the $30+ billion business whilst accelerating it’s AI-centered growth strategy across the 70+ countries and regions in which it operates. NTT DATA Group’s growth strategy will focus on two key areas alongside its core business operations: AI‑empowered New Value & Productivity; and Next‑Generation Infrastructure. It aims to lead in areas such as Operat
Venture Global Announces Closing of $2.25 Billion of Senior Secured Notes12.6.2026 00:00:00 EEST | Press release
Venture Global LNG, Inc. (“Venture Global”) announced today that its wholly-owned subsidiary, Venture Global LNG, Inc. (the “Issuer”) has closed its offering of $1.125 billion aggregate principal amount of its 6.375% senior secured notes due 2034 (the “2034 Notes”) and $1.125 billion aggregate principal amount of its 6.625% senior secured notes due 2036 (the “2036 Notes” and, together with the 2034 Notes, the “Notes”). The Issuer used the gross proceeds from the offering to redeem all of the Issuer’s outstanding 8.125% senior secured notes due 2028 (the “Existing 2028 Notes”) and used cash on hand to pay the redemption premium and related fees and expenses for the offering and the redemption. The 2034 Notes will mature on December 15, 2034, and the 2036 Notes will mature on June 15, 2036. The Notes were issued at par. The Notes will initially not be guaranteed by any of the Issuer’s subsidiaries. In the future, certain of the Issuer’s subsidiaries that incur or guarantee certain amount
Venture Global and Atlantic-SEE Announce Expansion of Long-Term LNG Sales and Purchase Agreement with Greece11.6.2026 23:30:00 EEST | Press release
Today, Venture Global, Inc. (NYSE: VG) and ATLANTIC – SEE LNG TRADE S.A. of Greece announced an expansion of their existing Sales and Purchase Agreement (SPA) for the purchase of U.S. liquefied natural gas (LNG) from Venture Global for twenty years starting in 2030. Under the deal, Atlantic-SEE is doubling their existing contract with Venture Global from a minimum of 0.5 million tonnes per annum (MTPA) to 1.0 million tonnes per annum (MTPA). Atlantic-SEE LNG is a newly formed joint venture announced in November at the 6th Partnership for Transatlantic Energy Cooperation (PTEC) conference hosted in Athens, Greece between Greek companies AKTOR Group and DEPA Commercial. The announcement of this expanded supply agreement follows Venture Global’s previously announced investment in regasification capacity at the Alexandroupolis LNG import terminal in Greece, which currently accounts for approximately 25% of the terminal’s total capacity. The Alexandroupolis LNG FSRU receiving terminal and S
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom